A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well as secrets. This vulnerability poses a serious security risk, potentially exposing confidential data and system integrity.
References
| Link | Resource |
|---|---|
| https://forums.ivanti.com/s/article/CVE-2023-39337?language=en_US | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
22 Nov 2023, 15:06
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:* | |
| References | () https://forums.ivanti.com/s/article/CVE-2023-39337?language=en_US - Vendor Advisory | |
| First Time |
Ivanti
Ivanti endpoint Manager Mobile |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
15 Nov 2023, 00:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-15 00:15
Updated : 2024-08-29 20:35
NVD link : CVE-2023-39337
Mitre link : CVE-2023-39337
JSON object : View
Products Affected
ivanti
- endpoint_manager_mobile
CWE