Ivanti · Endpoint Manager Cloud Service Appliance (EPM CSA)
Date added (CISA)
2024-03-25
Remediation due
2024-04-15
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).