CVE-2023-35084

2023-10-1803:52:06

hackerone

www.cve.org

deserialization

user input

unauthorized operations

ivanti endpoint manager

9.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON

Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "vendor": "Ivanti",
    "product": "Endpoint Manager",
    "versions": [
      {
        "version": "2022 su3",
        "status": "unaffected",
        "lessThan": "2022 su3",
        "versionType": "custom"
      }
    ]
  }
]

References

forums.ivanti.com/s/article/SA-2023-08-08-CVE-2023-35084?language=en_US