CVE-2020-13774 File upload in n/a
Authenticated attackers can achieve remote code execution by uploading malicious ASPX files due to insufficient validation in Ivanti Endpoint Manager.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-13774?
CVE-2020-13774 is a critical vulnerability in Ivanti Endpoint Manager, published on 12 Nov 2020. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated attacker to gain remote code execution by uploading a malicious aspx file. The issue is caused by insufficient file extension validation and insecure file operations on the uploaded image, which upon failure will leave the temporarily created files in an accessible location on the server.
Weakness: CWE-434
Which versions are affected by CVE-2020-13774?
It affects 1 product.
Products include Ivanti Endpoint Manager.
How do I fix CVE-2020-13774?
No fix has been published for CVE-2020-13774 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-13774 being exploited?
There is no known exploitation of CVE-2020-13774 in the wild and no public exploit code.
Other vulnerabilities in Ivanti Endpoint Manager
- CVE-2024-13159 Ivanti Endpoint Manager (EPM) Absolute Path Traversal
- CVE-2024-13160 Ivanti Endpoint Manager (EPM) Absolute Path Traversal
- CVE-2024-13161 Ivanti Endpoint Manager (EPM) Absolute Path Traversal
- CVE-2024-29824 Ivanti Endpoint Manager (EPM) SQL Injection
- CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass
Sources
Also known as GHSA-cjp5-25r3-4x92.