Lucene search
3c1d8aa1-5a33-4ea4-8992-aadd6440af75NVD:CVE-2024-8322HistorySep 10, 2024 - 9:15 p.m.
CVE-2024-8322
2024-09-1021:15:15
CWE-1390
3c1d8aa1-5a33-4ea4-8992-aadd6440af75
web.nvd.nist.gov
3
cve-2024
weak authentication
patch management
ivanti epm
remote attacker
restricted functionality
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality.
Affected configurations
Node
ivantiendpoint_managerRange<2022
ORivantiendpoint_managerMatch2022-
ORivantiendpoint_managerMatch2022su1
ORivantiendpoint_managerMatch2022su2
ORivantiendpoint_managerMatch2022su3
ORivantiendpoint_managerMatch2022su4
ORivantiendpoint_managerMatch2022su5
ORivantiendpoint_managerMatch2024-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ivanti | endpoint_manager | * | cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:* |
| ivanti | endpoint_manager | 2022 | cpe:2.3:a:ivanti:endpoint_manager:2022:-:*:*:*:*:*:* |
| ivanti | endpoint_manager | 2022 | cpe:2.3:a:ivanti:endpoint_manager:2022:su1:*:*:*:*:*:* |
| ivanti | endpoint_manager | 2022 | cpe:2.3:a:ivanti:endpoint_manager:2022:su2:*:*:*:*:*:* |
| ivanti | endpoint_manager | 2022 | cpe:2.3:a:ivanti:endpoint_manager:2022:su3:*:*:*:*:*:* |
| ivanti | endpoint_manager | 2022 | cpe:2.3:a:ivanti:endpoint_manager:2022:su4:*:*:*:*:*:* |
| ivanti | endpoint_manager | 2022 | cpe:2.3:a:ivanti:endpoint_manager:2022:su5:*:*:*:*:*:* |
| ivanti | endpoint_manager | 2024 | cpe:2.3:a:ivanti:endpoint_manager:2024:-:*:*:*:*:*:* |
Related
cve
cve
CVE-2024-8322
2024-09-10 21:15:15
vulnrichment
vulnrichment
CVE-2024-8322
2024-09-10 20:59:40
cvelist
cvelist
CVE-2024-8322
2024-09-10 20:59:40
nessus
nessus
Ivanti Endpoint Manager 2022 - September Security Update
2024-09-18 00:00:00
Ivanti Endpoint Manager 2024 - September 2024 Security Update
2024-09-13 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
20.0%
Related for NVD:CVE-2024-8322