CVE-2023-35078
קריטית 9.8 מנוצלת בשטח (KEV) בשימוש בכופרה
ניצול פעיל מאומת — קטלוג CISA KEV
- שם
- Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability
- נוסף לקטלוג
- יעד טיפול (פדרלי)
- פעולה נדרשת
- Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
תיאור (מקור, אנגלית)
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.
מדדים
- CVSS 3.1
-
9.8 (CRITICAL)
מקור הציון: NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — סבירות ניצול
- 100% (אחוזון 100) נכון ל-25/7/2026
- CWE
- CWE-287
מוצרים מושפעים
ivanti: endpoint manager mobile
קישורים
- https://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-… Vendor Advisory
- https://forums.ivanti.com/s/article/KB-Remote-unauthenticated-API-access-vulne… ExploitVendor Advisory
- https://www.ivanti.com/blog/cve-2023-35078-new-ivanti-epmm-vulnerability Vendor Advisory
- https://forums.ivanti.com/s/article/CVE-2023-35078-Remote-unauthenticated-API-… Vendor Advisory
- https://forums.ivanti.com/s/article/KB-Remote-unauthenticated-API-access-vulne… ExploitVendor Advisory
- https://www.ivanti.com/blog/cve-2023-35078-new-ivanti-epmm-vulnerability Vendor Advisory
- https://www.cisa.gov/news-events/alerts/2023/07/24/ivanti-releases-security-up… Third Party AdvisoryUS Government Resource
- https://www.cisa.gov/news-events/alerts/2023/07/24/ivanti-releases-security-up… Third Party AdvisoryUS Government Resource
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-202… US Government Resource