Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords...
8.4CVSS0.0019EPSS
SaveExploits0References1
Prion•added 2024/01/12 3:15 p.m.•14 views
Authorization
It is possible to download the configuration backup without authorization and decrypt included passwords using hardcoded static key...
