Vulnerabilitycritical

Ivanti Patches Yet Another Critical Flaw

Infosecurity Magazineby Phil MuncasterAug 3, 2023 · 09:30 UTC (Aug 3, 2023)1 min read3 · 1 read

Read at infosecurity-magazine.com

Analyze CVE-2023-35082 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-35082 CVE-2023-35078 CVE-2023-35081

Tags: cve-2023-35082 cve-2023-35078 cve-2023-35081 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-35078	Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) Exposes PII	9.8	100%	KEVRansomwarePoC	Jul 25, 2023 KEV Jul 25, 2023
CVE-2023-35081	Authenticated Path Traversal in Ivanti Endpoint Manager Mobile (EPMM)	7.2	64%	KEV	Aug 3, 2023 KEV Jul 31, 2023
CVE-2023-35082	Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core	9.8	100%	KEVRansomware	Aug 15, 2023 KEV Jan 18, 2024

From the original article

1 min read at infosecurity-magazine.com

Security vendor Ivanti has disclosed yet another critical vulnerability in its products, linked to a previous zero-day that was exploited by an APT group to compromise the Norwegian government. CVE-2023-35082 has a CVSS score of 10 and is described as a remote unauthenticated API access vulnerability in MobileIron Core 11. 2 and older.

Infosecurity Magazine

By Phil Muncaster · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.