Description (CNA)
An unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ivanti / Endpoint Manager | unaffected 2024 January-2025 Security Update; unaffected 2022 SU6 January-2025 Security Update |
CWE
CWE-426, CWE-22
References
- https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
ADP enrichment
No English description supplied.
No references supplied.