CVE-2024-13171: Unrestricted Upload of File with Dangerous Type

Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required...

CVE-2024-13172: Improper Verification of Cryptographic Signature

Improper signature verification in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required...

PT-2025-1129 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to the 2024 January-2025 Security Update Ivanti EPM versions prior to the 2022 SU6 January-2025 Security Update Description: An unbounded resource search path exists in Ivanti EPM. Exploitation of this issue may allo...

PT-2025-1127 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update Description: The issue is related to an uninitialized resource in Ivanti EPM, which can be exploited by a local authenticated attacker to...

PT-2025-1130 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2024 January-2025 Security Update Ivanti EPM versions prior to 2022 SU6 January-2025 Security Update Description: The issue is related to an out-of-bounds write in Ivanti EPM, allowing a remote unauthenticated...

PT-2025-1128 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update Description: The issue is related to a lack of protection against SQL query structure exploitation, allowing a remote attacker with...

PT-2025-1137 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2024 January-2025 Security Update Ivanti EPM versions prior to 2022 SU6 January-2025 Security Update Description: The issue is related to deserialization of untrusted data, which can allow a remote unauthenticated...

PT-2025-1126 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2024 January-2025 Security Update Ivanti EPM versions prior to 2022 SU6 January-2025 Security Update Description: The issue is related to improper signature verification in Ivanti EPM, which can allow a remote...

PT-2025-1132 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2024 January-2025 Security Update Ivanti EPM versions prior to 2022 SU6 January-2025 Security Update Description: The issue is related to an out-of-bounds write that allows a remote unauthenticated attacker to cau...

PT-2025-1133 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2024 January-2025 Security Update Ivanti EPM versions prior to 2022 SU6 January-2025 Security Update Description: The issue is related to an out-of-bounds write in memory, which can be exploited by a remote...

PT-2025-1135

Name of the Vulnerable Software and Affected Versions Ivanti EPM versions before 2024 January-2025 Security Update Ivanti EPM versions before 2022 SU6 January-2025 Security Update Description The issue is related to absolute path traversal in Ivanti EPM, allowing a remote unauthenticated attacker...

PT-2025-1138

Name of the Vulnerable Software and Affected Versions Ivanti EPM versions prior to 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update Description The issue is related to an out-of-bounds write in Ivanti EPM, which allows a remote unauthenticated attacker to cause a denial...

PT-2025-1131

Name of the Vulnerable Software and Affected Versions Ivanti EPM versions prior to 2024 January-2025 Security Update Ivanti EPM versions prior to 2022 SU6 January-2025 Security Update Description The issue is related to an out-of-bounds write in Ivanti EPM, which allows a remote unauthenticated...

PT-2025-1125

Name of the Vulnerable Software and Affected Versions Ivanti EPM versions before 2024 January-2025 Security Update Ivanti EPM versions before 2022 SU6 January-2025 Security Update Description The issue is related to insufficient filename validation, which can allow a remote unauthenticated attack...

PT-2025-1116

Name of the Vulnerable Software and Affected Versions Ivanti EPM versions before 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update Description The issue is related to absolute path traversal in Ivanti EPM, allowing a remote unauthenticated attacker to leak sensitive...

PT-2025-1134

Name of the Vulnerable Software and Affected Versions Ivanti EPM versions before 2024 January-2025 Security Update Ivanti EPM versions before 2022 SU6 January-2025 Security Update Description The issue is related to an absolute path traversal in Ivanti EPM, which can be exploited by a remote...

Ivanti EPM XML External Entity

Ivanti Endpoint Manager EPM versions 2022 SU6 / 2024 SU1 are vulnerable to an XML External Entity allowing an unauthenticated attacker to read arbitrary files from the system via a specially crafted request. No source data...

Metasploit Weekly Wrap-Up 11/22/2024

JetBrains TeamCity Login Scanner Metasploit added a login scanner for the TeamCity application to enable users to check for weak credentials. TeamCity has been the subject of multiple ETR vulnerabilities and is a valuable target for attackers. Targeted DCSync added to Windows Secrets Dump This...

Ivanti EPM Agent Portal Command Execution Exploit

This Metasploit module leverages an unauthenticated remote command execution vulnerability in Ivanti's EPM Agent Portal where an RPC client can invoke a method which will run an attacker-specified string on the remote target as NT AUTHORITY\SYSTEM. This vulnerability is present in versions prior ...

Ivanti EPM Agent Portal Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/proto/msnrtp/client' class MetasploitModule 'Ivanti EPM Agent Portal Command Execution', 'Description' = %q This module leverages an unauthenticated RCE in...