COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2023-35082

CVE-2023-35082

Severity
critical · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2024-01-18
Reference
https://nvd.nist.gov/vuln/detail/CVE-2023-35082
⌖ exploited in the wild shame 80/100 ransomwareexploited-in-wild

Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application.

Players implicated

Ivanti · vendorEndpoint Manager Mobile (EPMM) and MobileIron Core · product

Description

Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application.

Affected FedRAMP products 2 in the catalog

ProductProviderStatusMatch
Ivanti Neurons for ITSM (Formerly Service Manager) Ivanti Authorized vendor-exact · 0.90
Ivanti Neurons for MDM (Formerly MobileIron) Ivanti Authorized vendor-exact · 0.90