CVE-2023-35082

NVD Published Date: August 15, 2023 at 04:15 PM

NVD Last Modified: January 19, 2024 at 02:00 AM

Download Patch

Vulnerability ID

CVE-2023-35082

Severity

CRITICAL

Severity Score

9.8

Summary

An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.

References

https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US

Mitigation and Patches

Exploits

https://www.cisa.gov/known-exploited-vulnerabilities-catalog

https://github.com/Chocapikk/CVE-2023-35082

Metasploit Payload

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE ID

CWE-287

Recent Publish

CVE-2023-36845

CVE-2023-38035

CVE-2023-42793

CVE-2023-22515

CVE-2023-34048

CVE-2023-43208

See SecOps Solution
in action

Schedule Demo

Agentless security for your infrastructure and applications - to build faster, more securely and in a fraction of the operational cost of other solutions

CVE-2023-35082

Recent Publish

See SecOps Solution
in action

Products

Compare

Company

Resources

Try It

CVE-2023-35082

Recent Publish

See SecOps Solutionin action

Products

Compare

Company

Resources

Try It

See SecOps Solution
in action