VDB
BDU%3A2024-05798
BDU%3A2024-05798
PUBLISHED
CVSS 10 CRITICAL
Уязвимость приложения для управления жизненным циклом мобильных устройств и мобильных приложений Ivanti Endpoint Manager Mobile (EPMM) (ранее MobileIron Core), связанная с недостатками процедуры аутентификации, позволяющая нарушителю обойти процесс аутентификации
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | Ivanti Endpoint Manager Mobile | |
| Ivanti | EPMM | 11.10 |
Timeline
- Jan 18, 2024 PoC Published
- Jan 22, 2024 PoC Published
- Jul 29, 2024 CVE Published
- Sep 24, 2024 CVE Updated
- Oct 26, 2024 PoC Published
- Oct 27, 2024 PoC Published
- Oct 30, 2024 PoC Published
- Oct 31, 2024 PoC Published
- Nov 1, 2024 PoC Published
- Nov 2, 2024 PoC Published
- Nov 5, 2024 PoC Published
- Nov 7, 2024 PoC Published
References
- https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US url
- https://www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv url
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-35082 url