PT-2023-25134 · Unknown · Endpoint Manager

CVE-2023-35083 · Publicado 2023-10-17 · Atualizado 2023-10-25

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Endpoint Manager versions prior to 2022 SU3

Description The issue allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager, potentially leading to the leakage of sensitive information.

Recommendations For versions prior to 2022 SU3, update to a version that includes the fix for this issue to prevent arbitrary file reading. As a temporary workaround, consider restricting network access to Endpoint Manager to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2023-35083

Produtos afetados

Endpoint Manager

Referências · 6

• https://twitter.com/CVEnew/status/1714496290921513435 · Publicação no Twitter
• https://forums.ivanti.com/s/article/SA-2023-06-20-CVE-2023-35083?language=en_US · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-35083 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1714513562939367564 · Publicação no Twitter
• https://t.me/cibsecurity/72483 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-35083 · Nota de Segurança