Lucene search

HiveForce LabsHIVEPRO:3A608B7F3D5992360711CD4D3586322C

HistoryJan 08, 2024 - 9:07 a.m.

Ivanti Addresses Critical Vulnerability in Endpoint Manager

2024-01-0809:07:35

HiveForce Labs

www.hivepro.com

ivanti

critical vulnerability

endpoint manager

cve-2023-39336

endpoint management software

secure usage

worldwide customers

version 2022 service update 5

pre-authenticated sql injection

remote code injection

threat level red

vulnerability report

real-time threat advisories

hiveforce labs

8.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

21.8%

JSON

Summary: Ivanti addressed a critical vulnerability (CVE-2023-39336) in its Endpoint Management software, ensuring secure usage for its 40,000 worldwide customers. The flaw, resolved in version 2022 Service Update 5, posed a risk of pre-authenticated sql injection and possibly Remote Code Injection in case of core server. Threat Level - Red | Vulnerability Report For a detailed threat advisory, download the pdf file here To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.