PT-2025-1135 · Ivanti · Ivanti Epm

Published 2025-01-13 · Updated 2026-05-02 · CVE-2024-13161

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ivanti EPM versions before 2024 January-2025 Security Update Ivanti EPM versions before 2022 SU6 January-2025 Security Update

Description The issue is related to absolute path traversal in Ivanti EPM, allowing a remote unauthenticated attacker to leak sensitive information. This can be exploited by an attacker to gain unauthorized access to protected information. The vulnerability is associated with incorrect restriction of the directory path name.

Recommendations For Ivanti EPM versions before 2024 January-2025 Security Update, apply the 2024 January-2025 Security Update to resolve the issue. For Ivanti EPM versions before 2022 SU6 January-2025 Security Update, apply the 2022 SU6 January-2025 Security Update to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-36

Related Identifiers

BDU:2025-00408

CVE-2024-13161

Affected Products

Ivanti Epm

References · 36

• 🔥 https://horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities · Exploit
• https://bdu.fstec.ru/vul/2025-00408 · Security Note
• https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-13161 · Security Note
• https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6?language=en_US · Security Note
• https://osv.dev/vulnerability/CVE-2024-13161 · Vendor Advisory
• https://twitter.com/vulmoncom/status/1879285196429668844 · Twitter Post
• https://twitter.com/lyrie_ai/status/2050684359565250578 · Twitter Post
• https://twitter.com/Horizon3ai/status/1892628558255702161 · Twitter Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-13161 · Note
• https://twitter.com/securestep9/status/1879817541113294999 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1879354157234368940 · Twitter Post
• https://twitter.com/rxerium/status/1899535059486441609 · Twitter Post
• https://twitter.com/socradar/status/1899415396970537076 · Twitter Post
• https://twitter.com/WhalersLtd/status/1880874291073335669 · Twitter Post