CVE-2020-13772: 
Ivanti Endpoint Manager vulnerability analysis and mitigation

CVE-2020-13772 affects Ivanti Endpoint Manager (formerly Unified Endpoint Manager) through version 2020.1.1. The vulnerability allows unauthenticated attackers to disclose information about the server operating system, local pathnames, and environment variables through the /ldclient/ldprov.cgi endpoint (JUMPSEC Labs).

The vulnerability exists in the 'ldclient' component and can be accessed through multiple endpoints: /ldclient/ldprov.cgi on HTTP port 9595, HTTPS port 9594, and HTTPS port 9593. The vulnerability has a CVSS 3.1 score of 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N), indicating it is remotely exploitable with no authentication required (JUMPSEC Labs).

The vulnerability allows attackers to obtain sensitive system information including environment variables, domain name, internal paths, and CPU information. This information disclosure could potentially be used to facilitate further attacks against the system (JUMPSEC Labs).

The vulnerability can be exploited remotely without requiring authentication or user interaction. The attack vector is network-based, and the complexity of exploitation is considered low according to the CVSS scoring (JUMPSEC Labs).

As of the initial disclosure, no official patch was available from the vendor. The recommended mitigations include reviewing host configuration, monitoring for suspicious activity, and if possible, disabling or whitelisting access to the affected URLs (JUMPSEC Labs).