High WID-SEC-2024-1670 4 CVEs

Ivanti Endpoint Manager Mobile: Mehrere Schwachstellen

Published Jul 17, 2024 · Updated Jul 17, 2024 · de-DE

Vendor: ivanti Product: Endpoint Manager Mobile Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager Mobile ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen oder Sicherheitsmaßnahmen zu umgehen.

Product

Ivanti Endpoint Manager Mobile ist eine mobile Verwaltungssoftware zur Verwaltung von Richtlinien für mobile Geräte, Anwendungen und Inhalte.

Vulnerabilities 4

Critical 9.8

CVE-2024-36130

An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker …

ivanti EPMM Network devices

Aug 7, 2024
High 8.8

CVE-2024-36131

An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote att…

ivanti EPMM Network devices

Aug 7, 2024
High 8.2

CVE-2024-36132

Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass authe…

ivanti EPMM Network devices

Aug 7, 2024
Medium 5.3

CVE-2024-34788

An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to a…

ivanti EPMM Network devices

Aug 7, 2024

Revision history

2024-07-17 #1
Initiale Fassung

References

Ivanti Security Advisory vom 2024-07-17
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-for-Mobile-EPMM-July-2024