4465 matches found
CVE-2023-35078
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication...
CVE-2023-35078
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication...
CVE-2023-35078
CVE-2023-35078 is an authentication-bypass vulnerability affecting Ivanti Endpoint Manager Mobile (EPMM) / MobileIron Core. Public exploit/tooling exists targeting the API path /mifs/aad/api/v2/authorized/users to access restricted data without authentication. Affected versions include Ivanti/Mob...
Ivanti Releases Urgent Patch for EPMM Zero-Day Vulnerability Under Active Exploitation
Ivanti is warning users to update their Endpoint Manager Mobile EPMM mobile device management software formerly MobileIron Core to the latest version that fixes an actively exploited zero-day vulnerability. Dubbed CVE-2023-35078, the issue has been described as a remote unauthenticated API access...
Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
Ivanti Endpoint Manager Mobile EPMM, previously branded MobileIron Core contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API paths can access personally identifiable information PII such as names, phone...
Ivanti Endpoint Manager Mobile < 11.8.1.1 / 11.9.x < 11.9.1.1 / 11.10.x < 11.10.0.2 Remote Unauthenticated API Access (CVE-2023-35078)
The version of Ivanti Endpoint Manager Mobile, formerly MobileIron Core, running on the remote host is 11.8.1.1, 11.9.x 11.9.1.1, or 11.10.x 11.10.0.2. It is, therefore, affected by an undisclosed unauthenticated API access vulnerability. Note that Nessus has not tested for the temporary RPM-base...
Ivanti Endpoint Manager Mobile 授权问题漏洞
Ivanti Endpoint Manager Mobile Ivanti EPMM is a mobile management software engine from Ivanti Corporation, USA. An authorization issue vulnerability exists in Ivanti Endpoint Manager Mobile version 11.10 and prior versions, which stems from an authentication bypass that could allow a remote...
PT-2023-3876
Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager Mobile EPMM versions prior to 11.10 Description The issue is related to an authentication bypass vulnerability in Ivanti Endpoint Manager Mobile EPMM, which allows unauthorized users to access restricted functionality o...
CVE-2023-35078
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication. Recent assessments: cbeek-r7 at July 26, 2024 7:47pm UTC reported: A July 2024 bulletin from multiple U.S. government...
CVE-2023-35078 - Remote Unauthenticated API Access Vulnerability
Last Modified Date Sep 29, 2023 7:08:14 PM...
CVE-2023-35077
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above...
CVE-2023-35077
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above...
Cross site scripting
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above...
CVE-2023-35077
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above...
CVE-2023-35077
CVE-2023-35077 is an out-of-bounds write vulnerability in Ivanti Antivirus engines on Windows that causes the Ivanti Antivirus Product to crash. Affected component: Ivanti Antivirus engine on Windows; root cause: out-of-bounds write. Impact per sources: crash of the Ivanti Antivirus Product (avai...
CVE-2023-35077
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above...
Ivanti AntiVirus 缓冲区错误漏洞
Ivanti AntiVirus is an antivirus security software from Ivanti, USA. A security vulnerability exists in Ivanti AntiVirus versions prior to 7.9.1.285, which stems from an out-of-bounds write vulnerability that can be exploited by an unauthenticated, remote attacker to conduct remote arbitrary code...
PT-2023-25132 · Microsoft +1 · Windows +1
Name of the Vulnerable Software and Affected Versions: Ivanti AntiVirus Product versions prior to 7.9.1.285 Description: An out-of-bounds write vulnerability on Windows operating systems causes the Ivanti AntiVirus Product to crash. Recommendations: Update to Ivanti AV Product version 7.9.1.285 o...
SA-2023-07-19-CVE-2023-35077
SECURITY ADVISORY 07-19-2023 Product Affected: Ivanti Endpoint Manager A vulnerability was recently discovered for Ivanti Antivirus Security Content version 7.94791 and all previous versions. Updating to Ivanti Antivirus Product version 7.9.1.285 will allow the Security Content version to update ...