Ivanti Releases Security Updates for EPMM to address CVE-2023-35081

ronjor · Jul 28, 2023

Release Date July 28, 2023

Ivanti has identified and released patches for a directory traversal vulnerability (CVE-2023-35081, CWE-22) in Ivanti Endpoint Manager Mobile (EPMM). This vulnerability allows an attacker with EPMM administrator privileges to write arbitrary files with the operating system privileges of the EPMM web application server
Click to expand...

.

The attacker could then execute the uploaded file, for example, a web shell. To gain EPMM administrator privileges, the attacker could exploit CVE-2023-35078 on an unpatched system.
Click to expand...

Ivanti reports active exploitation of both CVE-2023-35081 and CVE-2023-35078.
This vulnerability affects supported EPMM versions 11.10, 11.9, and 11.8. Older, unsupported versions are also affected.
Click to expand...

CISA urges users and organizations to patch both CVE-2023-35081 and CVE-2023-35078. Patches for CVE-2023-35081 also include patches for CVE-2023-35078 (refer to our prior alert.)
Click to expand...

stapp · Aug 3, 2023

Researchers Discover Bypass for Recently Patched Critical Ivanti EPMM Vulnerability

Cybersecurity researchers have discovered a bypass for a recently fixed actively exploited vulnerability in some versions of Ivanti Endpoint Manager Mobile (EPMM), prompting Ivanti to issue a new round of patches.
Tracked as CVE-2023-35082 (CVSS score: 10.0) and discovered by Rapid7, the issue "allows unauthenticated attackers to access the API in older unsupported versions of MobileIron Core (11.2 and below)."
Click to expand...

https://thehackernews.com/2023/08/researchers-discover-bypass-for.html

Log in or Sign up

Ivanti Releases Security Updates for EPMM to address CVE-2023-35081

ronjor Global Moderator

stapp Global Moderator

Log in or Sign up

Ivanti Releases Security Updates for EPMM to address CVE-2023-35081

ronjor Global Moderator

stapp Global Moderator

Useful Searches