CVE-2023-39335
CVE-2023-39335
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 2.3%KEV nãoPoC —Patch —
Ciclo de vida
14 nov 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potential misuse of user accounts and resources.
Productos afectados
Ivanti · EPMM¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →