22 matches found
Ivanti Endpoint Manager Mobile (EPMM) - Authentication Bypass
Ivanti Endpoint Manager Mobile EPMM, formerly MobileIron Core, through 11.10 allows remote attackers to obtain PII, add an administrative account, and change the configuration because of an authentication bypass, as exploited in the wild in July 2023. A patch is available. id: CVE-2023-35078 info...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
CVE-2023-35078 Exploit Tool bash ██████╗ ███╗ ██╗███████...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
CVE-2023-35078 Ivanti Endpoi...
Authentication flaw
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier...
CVE-2023-35082
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier...
Norwegian Entities Targeted in Ongoing Attacks Exploiting Ivanti EPMM Vulnerability
Advanced persistent threat APT actors exploited a recently disclosed critical flaw impacting Ivanti Endpoint Manager Mobile EPMM as a zero-day since at least April 2023 in attacks directed against Norwegian entities, including a government network. The disclosure comes as part of a new joint...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
nmap-CVE-2023-35078-Exploit Nmap script to exploit CVE-2023-35...
CISA and International Partner NCSC-NO Release Joint Cybersecurity Advisory on Threat Actors Exploiting Ivanti EPMM Vulnerabilities
The Cybersecurity and Infrastructure Security Agency CISA and the Norwegian National Cyber Security Centre NCSC-NO have released a joint Cybersecurity Advisory CSA, Threat Actors Exploiting Ivanti EPMM Vulnerabilities, in response to the active exploitation of CVE-2023-35078 and CVE-2023-35081...
Ivanti Endpoint Manager Mobile Remote Unauthenticated API Access (CVE-2023-35078)
Binary data ivantiendpointmanagermobileCVE-2023-35078.nbin...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
CVE-2023-35078 This script ethically checks for the presence...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
CVE-2023-35078-Poc-Exploit This tool is built in golang langua...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
CVE-2023-35078-Poc-Exploit This tool is built in golang langua...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
CVE-2023-35078-Poc-Exploit This tool is built in golang langua...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
CVE-2023-35078-Poc-Exploit This tool is built in golang langua...
Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
Ivanti Endpoint Manager Mobile EPMM contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions if applicab...
Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile
CVE-2023-35078 Exploit POC CVE-2023-35078 Remote Unauthenticat...
Patch now! Ivanti Endpoint Manager Mobile Authentication vulnerability used in the wild
The Cybersecurity and Infrastructure Security Agency CISA added one new vulnerability to its Known Exploited Vulnerabilities Catalog affecting Ivanti Endpoint Manager Mobile, based on evidence of active exploitation. All Federal Civilian Executive Branch FCEB agencies must remediate this...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors an...
CVE-2023-35078
CVE-2023-35078 is an authentication-bypass vulnerability affecting Ivanti Endpoint Manager Mobile (EPMM) / MobileIron Core. Public exploit/tooling exists targeting the API path /mifs/aad/api/v2/authorized/users to access restricted data without authentication. Affected versions include Ivanti/Mob...
CVE-2023-35078
creationtimestamp| type| source ---|---|--- 2023-07-25 05:48:54+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus12/2023 2023-07-25 05:55:59+00:00| seen| https://t.me/thehackernews/3640 2023-07-25 07:26:05+00:00| exploited| Telegram/qHzLqnpkQ6lkNyVJiJ3c0QdKbofQ14FsTmwbpCsMwHtLV...