CVE-2023-35078

Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

Endpoint Manager Mobile

An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.

25. Jul 2023

Ausgewertete Quellen

• Hersteller
  https://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-access-vulnerability
• Hersteller
  https://forums.ivanti.com/s/article/KB-Remote-unauthenticated-API-access-vulnerability-CVE-2023-35078
• Hersteller
  https://www.ivanti.com/blog/cve-2023-35078-new-ivanti-epmm-vulnerability
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35078
• CISA
  Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
• CISA
  https://www.cisa.gov/news-events/alerts/2023/07/24/ivanti-releases-security-updates-endpoint-manager-mobile-epmm-cve-2023-35078
• NVD
  CVE-2023-35078