Auth bypass in Ivanti Endpoint Security
CVE-2018-6316
Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in lockdown mode.
Vulnerability class: Broken Access Control
EPSS: 0.019 (77.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Ivanti Endpoint_security — versions 8.5
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Permissions Required, x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2018-6316?
- CVE-2018-6316 is a high-severity vulnerability in Ivanti Endpoint Security, classified under Incorrect Authorization. CVSS score: 7.5/10. Published 2018-02-15.
- How severe is CVE-2018-6316?
- High severity. CVSS v3 base score is 7.5 out of 10.