Description
Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker to in a MITM position to read and modify HTTP traffic.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | Endpoint Manager | patch: 2024 SU8 | — |
Advisories 2
- NCSC-2026-0493 Kwetsbaarheden verholpen in Ivanti Endpoint Manager NCSC-NL (Netherlands) · Nov 13, 2026
- WID-SEC-2026-4512 Ivanti Endpoint Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 10, 2026