User Impersonation Vulnerability in Ivanti EPMM

CVE-2023-39335

What is CVE-2023-39335?

A vulnerability has been discovered in Ivanti's EPMM that allows an unauthenticated attacker to impersonate an existing user during the device enrollment process. This flaw can lead to unauthorized access to user accounts, giving malicious actors the potential to misuse resources and compromise sensitive information. Effective mitigation strategies should be implemented to safeguard against this security risk.

References