Path Traversal Vulnerability in Ivanti Endpoint Manager

CVE-2025-13661

What is CVE-2025-13661?

A path traversal vulnerability exists in Ivanti Endpoint Manager before version 2024 SU4 SR1, allowing a remote authenticated attacker to manipulate file paths. This flaw enables the attacker to write arbitrary files outside the intended directory, potentially compromising the system's integrity. User interaction is necessary for exploitation, making it crucial for administrators to apply the recommended updates to safeguard against such attacks.

References