CVE-2023-35082

Produto

Ivanti / Endpoint Manager Mobile (EPMM) and MobileIron Core

Vulnerabilidade

Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

Adicionado ao KEV

18 de jan. de 2024

Corrigir até

8 de fev. de 2024

Uso conhecido em ransomware

Sim

Descrição resumida

Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older; https://nvd.nist.gov/vuln/detail/CVE-2023-35082