Authentication Bypass in Ivanti Endpoint Manager Mobile
CVE-2023-35078

9.8CRITICAL

Key Information:

Vendor: Ivanti
Status: Endpoint Manager Mobile
Vendor: CVE Published:; 25 July 2023

Badges

💰 Ransomware👾 Exploit Exists🟡 Public PoC🟣 EPSS 94%🦅 CISA Reported📰 News Worthy

What is CVE-2023-35078?

The authentication bypass vulnerability in Ivanti Endpoint Manager Mobile (EPMM) potentially allows unauthorized users to access restricted application functionality and resources without proper authentication. This flaw emphasizes the importance of ensuring robust access controls and securing API endpoints to prevent unauthorized exploitation.

CISA has reported CVE-2023-35078

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2023-35078 as being exploited and is known by the CISA as enabling ransomware campaigns.

The CISA's recommendation is: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Affected Version(s)

Endpoint Manager Mobile 11.10

Endpoint Manager Mobile 11.9

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2023-35078-Exploit-POC
Created by vchan-in

CVE-2023-35078
Created by raytheon0x21

CVE-2023-35078
Created by lager1