Ivanti EPM Credential Coercion

🗓️ 20 Feb 2025 00:00:00Reported by James Horseman, Horizon3 Attack Team, Zach HanleyType

packetstormnews

packetstormnews🔗 packetstorm.news👁 4 Views

This unauthenticated PoC exploit enables coercion of Ivanti EPM machine credential for relay attacks.

Reporter	Title	Published	Views	Family All 64
ATTACKERKB	CVE-2024-13160	14 Jan 202500:00	–	attackerkb
ATTACKERKB	CVE-2024-13161	14 Jan 202500:00	–	attackerkb
ATTACKERKB	CVE-2024-13159	14 Jan 202500:00	–	attackerkb
ATTACKERKB	CVE-2024-10811	14 Jan 202517:15	–	attackerkb
BDU FSTEC	The vulnerability of the Ivanti EPM endpoint management software lies in the improper restriction of path names in the catalog, which allows a malicious actor to gain unauthorized access to protected information.	17 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ivanti EPM endpoint management software lies in the improper restriction of path names in the catalog, which allows a malicious actor to gain unauthorized access to protected information.	17 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ivanti EPM endpoint management software lies in the improper restriction of path names in the catalog, which allows a malicious actor to gain unauthorized access to protected information.	17 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Ivanti EPM endpoint management software lies in the improper restriction of path names in the catalog, which allows a malicious actor to gain unauthorized access to protected information.	17 Jan 202500:00	–	bdu_fstec
Circl	CVE-2024-10811	14 Jan 202517:03	–	circl
Circl	CVE-2024-13159	14 Jan 202517:21	–	circl

20 Feb 2025 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5 - 9.8

EPSS0.99762

SSVC

Ivanti EPM machine credential relay attacks unauthenticated coercion proof of concept