PT-2024-6216 · Ivanti · Ivanti Epm

Published 2024-08-29 · Updated 2024-09-12 · CVE-2024-8320

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ivanti EPM versions prior to 2022 SU6 Ivanti EPM versions prior to the 2024 September update

Description The issue is related to a lack of authentication for a critical function in Ivanti EPM, specifically in Network Isolation. This allows a remote attacker to modify the network isolation status of managed devices without proper authentication. The attacker can spoof the Network Isolation status, potentially leading to unauthorized access or changes to the managed devices.

Recommendations For Ivanti EPM versions prior to 2022 SU6, update to 2022 SU6 or later to resolve the issue. For Ivanti EPM versions prior to the 2024 September update, apply the 2024 September update to fix the issue. As a temporary workaround, consider restricting access to the Network Isolation feature until a patch is available.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2024-07157

CVE-2024-8320

Affected Products

Ivanti Epm

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2024-8320 · Security Note
• https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-8320 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07157 · Security Note
• https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022?language=en_US · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-8320 · Note
• https://t.me/cvenotify/94455 · Telegram Post
• https://twitter.com/CVEnew/status/1833615166535078185 · Twitter Post
• https://t.me/cvedetector/5304 · Telegram Post
• https://vuldb.com/?id.277096 · Note