Auth bypass in Ivanti Endpoint Security

CVE-2018-6316

Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in lockdown mode.

Vulnerability class: Broken Access Control

EPSS: 0.019 (77.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2018-6316?
CVE-2018-6316 is a high-severity vulnerability in Ivanti Endpoint Security, classified under Incorrect Authorization. CVSS score: 7.5/10. Published 2018-02-15.
How severe is CVE-2018-6316?
High severity. CVSS v3 base score is 7.5 out of 10.