Deserialization of untrusted data

2023-10-1804:15:00

PRIOn knowledge base

www.prio-n.com

deserialization

untrusted data

unsafe

user input

execution

unauthorized operations

remote commands

nvd

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON

Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely.

CPENameOperatorVersion
endpoint_managereq2022 su1
endpoint_managerlt2022
endpoint_managereq2022
endpoint_managereq2022 su2
endpoint_managereq2022 su3

Name	Operator	Version
endpoint_manager	eq	2022 su1
endpoint_manager	lt	2022
endpoint_manager	eq	2022
endpoint_manager	eq	2022 su2
endpoint_manager	eq	2022 su3

References

forums.ivanti.com/s/article/SA-2023-08-08-CVE-2023-35084?language=en_US