Vulnerabilities > CVE-2018-6316 - Incorrect Authorization vulnerability in Ivanti Endpoint Security 8.5
Attack vector
NETWORK Attack complexity
HIGH Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
Ivanti Endpoint Security (formerly HEAT Endpoint Management and Security Suite) 8.5 Update 1 and earlier allows an authenticated user with low privileges and access to the local network to bypass application whitelisting when using the Application Control module on Ivanti Endpoint Security in lockdown mode.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |