CVE-2023-35082

An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.
Configurations

Configuration 1 (hide)

cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:07

Type Values Removed Values Added
References () https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US - Vendor Advisory () https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US - Vendor Advisory

19 Jan 2024, 02:00

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de omisión de autenticación en Ivanti EPMM 11.10 y versiones anteriores permite a usuarios no autorizados acceder a funciones o recursos restringidos de la aplicación sin la autenticación adecuada. Esta vulnerabilidad es exclusiva de CVE-2023-35078 anunciada anteriormente.

Information

Published : 2023-08-15 16:15

Updated : 2024-12-26 20:48


NVD link : CVE-2023-35082

Mitre link : CVE-2023-35082

CVE.ORG link : CVE-2023-35082


JSON object : View

Products Affected

ivanti

  • endpoint_manager_mobile
CWE
CWE-287

Improper Authentication