Exploit / PoCcriticalExploited in the wild

New flaw in Ivanti Endpoint Manager Mobile actively exploited in the wild

Security Affairsby @securityaffairsJul 30, 2023 · 12:47 UTC (Jul 30, 2023)1 min read3

Read at securityaffairs.com

Analyze CVE-2023-35081 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-35081 CVE-2023-35078

Tags: cve-2023-35081 cve-2023-35078 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-35078	Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) Exposes PII	9.8	100%	KEVRansomwarePoC	Jul 25, 2023 KEV Jul 25, 2023
CVE-2023-35081	Authenticated Path Traversal in Ivanti Endpoint Manager Mobile (EPMM)	7.2	64%	KEV	Aug 3, 2023 KEV Jul 31, 2023

From the original article

1 min read at securityaffairs.com

Software firm Ivanti disclosed another security vulnerability impacting Endpoint Manager Mobile (EPMM), that it said actively exploited. Ivanti disclosed a new security vulnerability impacting Endpoint Manager Mobile (EPMM), tracked as CVE-2023-35081 (CVSS score: 7. 8), that was exploited in the wild as part of an exploit chain by threat actors.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.