Description
XML Injection with Endpoint Manager 2022. 3 and below causing a download of a malicious file to run and possibly execute to gain unauthorized privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Ivanti Endpoint Manager | 2022.3 and below | — |
Advisories 1
- WID-SEC-2022-2237 Ivanti Endpoint Manager: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Dec 5, 2022