CVE-2023-39335

EPSS 2.3%CWE-269

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 2.3%KEV nãoPoC —Patch —

Ciclo de vida

14 nov 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potential misuse of user accounts and resources.

Produtos afetados

Ivanti · EPMM

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://forums.ivanti.com/s/article/CVE-2023-39335?language=en_US