CVE-2023-35083
CVE-2023-35083
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
18 Oct 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all previous versions potentially leading to the leakage of sensitive information.
Affected products
Ivanti · Endpoint ManagerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →