CVE-2023-35082
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Aug 15, 2023
Updated: Dec 26, 2024
CWE ID 287
Summary
CVE-2023-35082 is a newly identified authentication bypass vulnerability affecting Ivanti Endpoint Manager (EPMM) versions 11.10 and older. Unauthorized users can exploit this weakness to gain access to restricted functionality or resources within the application without proper authentication. This vulnerability distinguishes itself from CVE-2023-35078, which was previously announced, as it involves a different authentication bypass method.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Ivanti Endpoint Manager Mobile
Affected Vendors
- Ivanti Software Inc.