Bypass Authentication and Access Sensitive Resources

CVE-2024-36132

Summary

The Ivanti Endpoint Manager for Mobile (EPMM) suffers from an authentication bypass vulnerability due to insufficient verification of authentication controls. This flaw enables remote attackers to circumvent authentication mechanisms, potentially allowing unauthorized access to sensitive resources within the system. It is crucial for organizations using versions prior to 12.1.0.1 to assess their exposure and apply the relevant security updates to mitigate this risk.

References