CVE-2020-13793

Impact

Unsafe storage of AD credentials in Ivanti DSM netinst 5.1 due to a static, hard-coded encryption key.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://forums.ivanti.com/s/article/Release-Notes-for-DSM-2020-1
• https://insinuator.net/2020/06/security-advisories-for-ivanti-dsm-suite/
• https://forums.ivanti.com/s/article/Release-Notes-for-DSM-2020-1
• https://insinuator.net/2020/06/security-advisories-for-ivanti-dsm-suite/