CVE-2023-35078

Summary

CVE-2023-35078 is an authentication bypass vulnerability affecting Ivanti Endpoint Management Manager (EPMM). This issue permits unauthorized users to access restricted functionality or resources within the application, bypassing the required authentication process. Successful exploitation of this vulnerability could result in significant data breaches or system compromises. Ivanti urges users to apply the available patch immediately to mitigate this risk. Unauthenticated users can potentially gain unauthorized access to sensitive areas of Ivanti EPMM, posing a serious threat to organizational security.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.