PT-2023-9264 · Ivanti · Ivanti Endpoint Manager Mobile

Published 2023-08-02 · Updated 2026-05-08 · CVE-2023-35082

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager Mobile (EPMM) versions 11.10 and older

Description The issue is related to an authentication bypass vulnerability in Ivanti EPMM, which allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is being actively exploited, giving attackers access to data. The U.S. CISA has warned of this flaw and urges action, especially for government agencies.

Recommendations For Ivanti Endpoint Manager Mobile (EPMM) versions 11.10 and older: As a temporary workaround, consider disabling the vulnerable authentication mechanism until a patch is available. Restrict access to the affected API endpoints to minimize the risk of exploitation. Apply patches as soon as they are available to fix the authentication bypass vulnerability. Note: Since the provided information does not specify a fixed version, it is essential to check the official Ivanti website for the latest patches and updates.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2024-05798

CVE-2023-35082

Affected Products

Ivanti Endpoint Manager Mobile

References · 81

• 🔥 https://github.com/Chocapikk/CVE-2023-35082 · Exploit
• https://osv.dev/vulnerability/CVE-2023-35082 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35082 · Security Note
• https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older · Security Note
• https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05798 · Security Note
• https://t.me/netlas/84 · Telegram Post
• https://twitter.com/ctilabs/status/1838209022232563813 · Twitter Post
• https://twitter.com/shah_sheikh/status/1748358297508598221 · Twitter Post
• https://twitter.com/privilegedusers/status/1756240231043596667 · Twitter Post
• https://twitter.com/sonnialigao/status/1748363408645193848 · Twitter Post
• https://twitter.com/kackerman_IT/status/1748502882595524959 · Twitter Post
• https://twitter.com/privsecnews/status/1748364312580698232 · Twitter Post
• https://twitter.com/inthewildio/status/1748080285730673055 · Twitter Post
• https://t.me/aptreports/22336 · Telegram Post