VULNERABILITY INTELLIGENCE

CVE-2020-13772

CVSS score5.3 MEDIUM

EPSS probability2.31%

CISA KEVNot currently listed

Published2020-11-16

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

In /ldclient/ldprov.cgi in Ivanti Endpoint Manager through 2020.1.1, an attacker is able to disclose information about the server operating system, local pathnames, and environment variables with no authentication required.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo

Primary references

cve@mitre.org — Permissions Required, Vendor Advisory
cve@mitre.org — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory