CVE-2019-12373 : Security Advisory and Response

Ivanti LANDESK Management Suite (LDMS) version 10.0.1.168 Service Update 5 is vulnerable to remote disclosure of administrator passwords due to improper access control and open directories.

Understanding CVE-2019-12373

This CVE highlights a security issue in Ivanti LANDESK Management Suite that could potentially lead to the exposure of administrator passwords.

What is CVE-2019-12373?

The vulnerability in Ivanti LANDESK Management Suite allows for the remote disclosure of administrator passwords through improper access control and open directories.

The Impact of CVE-2019-12373

The vulnerability poses a significant risk as it could result in unauthorized access to sensitive administrator passwords, compromising the security of the system.

Technical Details of CVE-2019-12373

Ivanti LANDESK Management Suite version 10.0.1.168 Service Update 5 is affected by the following:

Vulnerability Description

The vulnerability arises from improper access control and open directories in the LDMS software, potentially leading to the remote disclosure of administrator passwords.

Affected Systems and Versions

Product: Ivanti LANDESK Management Suite (LDMS)
Version: 10.0.1.168 Service Update 5

Exploitation Mechanism

The vulnerability can be exploited remotely by attackers to gain access to administrator passwords through the identified security weaknesses.

Mitigation and Prevention

It is crucial to take immediate steps to address and prevent the exploitation of this vulnerability:

Immediate Steps to Take

Implement access controls and restrictions to limit unauthorized access
Regularly monitor and audit access logs for any suspicious activities
Apply security patches and updates provided by Ivanti to fix the vulnerability

Long-Term Security Practices

Conduct regular security assessments and penetration testing to identify vulnerabilities
Educate system administrators on best practices for securing sensitive information
Consider implementing multi-factor authentication for enhanced security

Patching and Updates

Ensure that the Ivanti LANDESK Management Suite software is updated to the latest version that includes patches to address this vulnerability