CVE-2020-13793

Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2020-08-06

Last modified

2024-08-04

Weaknesses

CWE-798

Affected products

• Dsm Netinst (Ivanti)

References

• https://forums.ivanti.com/s/article/Release-Notes-for-DSM-2020-1
• https://insinuator.net/2020/06/security-advisories-for-ivanti-dsm-suite/