Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass authentication and access sensitive resources.
References
Link | Resource |
---|---|
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-for-Mobile-EPMM-July-2024 | Vendor Advisory |
Configurations
History
12 Aug 2024, 18:53
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-287 | |
First Time |
Ivanti endpoint Manager Mobile
Ivanti |
|
CPE | cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
References | () https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-for-Mobile-EPMM-July-2024 - Vendor Advisory |
07 Aug 2024, 15:17
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
07 Aug 2024, 04:17
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-08-07 04:17
Updated : 2024-08-12 18:53
NVD link : CVE-2024-36132
Mitre link : CVE-2024-36132
CVE.ORG link : CVE-2024-36132
JSON object : View
Products Affected
ivanti
- endpoint_manager_mobile
CWE
CWE-287
Improper Authentication