CWE Code: 863
Vulnerability Type: privilege_escalation
CVSS Score: 6.0
CWE Name:  Incorrect Authorization
Summary: ivanti endpoint security (formerly heat endpoint management and security suite) 8.5 update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the application control module on ivanti endpoint security in lockdown mode.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-02-15
Last Modified Date: 2019-10-03