RaqibCTI
CVE

CVE-2023-35081

P2
Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
Ivanti · Endpoint Manager Mobile (EPMM)
Date added (CISA)
2023-07-31
Remediation due
2023-08-21
Known ransomware use
Not indicated
Remediation priority
P2past CISA due date

Description

Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions (if applicable).

Source: NVD ↗ · CISA KEV Catalog ↗