1. Home
  2. CVE Database
  3. CVE-2018-6316
HIGH · 7.5

CVE-2018-6316

Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass appl...

Vulnerability Description

Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in lockdown mode.

CVSS Score

7.5

HIGH

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IvantiEndpoint Security<= 8.5

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2018-6316?

CVE-2018-6316 is a vulnerability with a CVSS score of 7.5 (HIGH). Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass appl...

How severe is CVE-2018-6316?

CVE-2018-6316 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2018-6316?

Check the references section above for vendor advisories and patch information. Affected products include: Ivanti Endpoint Security.