Unscored CVE-2023-35084 EUVD-2023-39119GHSA-cgm3-p7mh-qpqx

Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previou…

Published Oct 18, 2023 · Updated Sep 13, 2024 · Assigned by hackerone

Vendor: ivanti Product: Endpoint Manager Category: Network devices

Description

Unsafe Deserialization of User Input could lead to Execution of Unauthorized Operations in Ivanti Endpoint Manager 2022 su3 and all previous versions, which could allow an attacker to execute commands remotely.

Affected products

Vendor	Product	Affected	Fixed
Ivanti	Endpoint Manager	—	—

Advisories 1

WID-SEC-2023-2421 Ivanti Endpoint Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 9, 2023

References

https://forums.ivanti.com/s/article/SA-2023-08-08-CVE-2023-35084?language=en_US