VulnerabilitycriticalExploited in the wild

Ivanti Warns of Another Endpoint Manager Mobile Vulnerability Under Active Attack

The Hacker Newsby @TheHackersNewsAug 2, 2023 · 03:15 UTC (Aug 2, 2023)2 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2023-35081 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-35081 CVE-2023-35078

Tags: cve-2023-35081 cve-2023-35078 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-35078	Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) Exposes PII	9.8	100%	KEVRansomwarePoC	Jul 25, 2023 KEV Jul 25, 2023
CVE-2023-35081	Authenticated Path Traversal in Ivanti Endpoint Manager Mobile (EPMM)	7.2	64%	KEV	Aug 3, 2023 KEV Jul 31, 2023

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jul 29, 2023 Vulnerability / Enterprise Security Ivanti has disclosed yet another security flaw impacting Endpoint Manager Mobile (EPMM), formerly known as MobileIron Core, that it said has been weaponized as part of an exploit chain by malicious actors in the wild. The new vulnerability, tracked as CVE-2023-35081 (CVSS score: 7. 8), impacts supported versions 11.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.