Ivanti Endpoint Manager Security Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager versions 11.11, 11.10, and 11.9 and earlier, which originated from a vulnerability that allows an unauthenticated attacker to impersonate a...

Ivanti Endpoint Manager Security Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager versions 11.11, 11.10, and 11.9 and earlier, which stems from a vulnerability that allows a threat actor with knowledge of the identifier o...

Vulnerabilities fixed in Ivanti Endpoint Manager Mobile

Ivanti has fixed vulnerabilities in Endpoint Manager Mobile formerly MobileIron. A malicious party could exploit the vulnerabilities to request certificates on behalf of another user request certificates, or register a mobile device in someone else's name. This allows the malicious party to gain...

PT-2023-26885 · Ivanti · Ivanti Endpoint Manager Mobile

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager Mobile versions 11.10, 11.9, and 11.8 and older Description: A security issue has been identified that allows an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This...

CVE-2023-35084

Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely...

CVE-2023-35084

Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely...

CVE-2023-35083

Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all previous versions potentially leading to the leakage of sensitive information...

CVE-2023-35083

Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all previous versions potentially leading to the leakage of sensitive information...

Information disclosure

Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all previous versions potentially leading to the leakage of sensitive information...

CVE-2023-35083

Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all previous versions potentially leading to the leakage of sensitive information...

CVE-2023-35083

Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all previous versions potentially leading to the leakage of sensitive information...

CVE-2023-35083

Summary: CVE-2023-35083 affects Ivanti Endpoint Manager. A vulnerability allows an authenticated attacker with network access to read arbitrary files on the Endpoint Manager server, leading to potential information disclosure. This weakness has been documented across multiple sources (NVD/NIST, C...

CVE-2023-35084

CVE-2023-35084 affects Ivanti Endpoint Manager (including 2022 SU3 and older versions). The issue is unsafe deserialization of user input, allowing an attacker to remotely execute commands or potentially read/exfiltrate data on the core server. Impact is described as high (remote code execution a...

CVE-2023-35084

Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely...

CVE-2023-35084

Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely...

Ivanti Endpoint Manager Security Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti USA. A security vulnerability exists in Ivanti Endpoint Manager 2022 SU3 and prior versions, which originated from a vulnerability that allows an attacker to read arbitrary files and cause information disclosure...

Ivanti Endpoint Manager Code Issue Vulnerability

Ivanti Endpoint Manager EPM is a suite of endpoint security managers from Ivanti USA. A security vulnerability exists in Ivanti Endpoint Manager 2022 SU3 and prior versions, which stems from a vulnerability that allows an attacker to read and disclose files on the server and perform elevation of...

PT-2023-25135 · Ivanti · Ivanti Endpoint Manager

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2022 su3 Description: The issue is related to unsafe deserialization of user input, which could lead to the execution of unauthorized operations. This could allow an attacker to execute commands...

PT-2023-25134 · Unknown · Endpoint Manager

Name of the Vulnerable Software and Affected Versions: Endpoint Manager versions prior to 2022 SU3 Description: The issue allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager, potentially leading to the leakage of sensitive information. Recommendations:...

Ivanti Endpoint Manager ProcessEPMAuthToken Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ProcessEPMAuthToken method. The issue results from the lack of proper...