Paper/Archive/CVE-2023-35082

CVE-2023-35082

Ivanti EPMM — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

KEV · due 8 Feb ransomware use EPSS 100%public exploit SSVC act CVSS 10.0

100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 In CISA KEV+3030.0 EPSS percentile 100.01.000 × 2020.0 Exploit: SSVC active+1010.0 SSVC exploitation: active+1010.0

Description · from the CVE record

An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.

Affected

ProductAffectedFixed inSource

EPMM11.10 – 11.10–CNA

Scores by source

hackerone (CNA)10.0CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refforums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35082 kevcisa.gov/known-exploited-vulnerabilities-catalog