We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A directory traversal vulnerability exists in Ivanti LANDesk Management Gateway through 4.2-1.9. By appending %3F.php to the URI of the /client/index.php endpoint, an attacker can bypass access controls and gain unauthorized access to various endpoints such as /client/index.php%3F.php/gsb/firewall.php within the management web panel, potentially exposing sensitive device information. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Reserved 2025-04-17 | Published 2025-04-23 | Updated 2025-04-23 | Assigner mitreCWE-180 Incorrect Behavior Order: Validate Before Canonicalize
forums.ivanti.com/...ANDesk-Management-Gateway-Functionality
medium.com/...andesk-management-gateway-devices-6dba386dd290
Support options
