CVE-2023-38343

Summary

CVE-2023-38343 is a newly discovered vulnerability affecting Ivanti Endpoint Manager's CSEP component before version 2022 SU4. This issue involves an XML External Entity (XXE) injection, which allows attackers to inject malicious XML code that can lead to file disclosure or Server Side Request Forgery (SSRF). The XML parser configuration in Ivanti Endpoint Manager fails to disable external entity references, making it susceptible to such attacks. The exploitation of this vulnerability could potentially result in unauthorized access to sensitive data or even system takeover.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.