Description (CNA)
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ivanti / Endpoint Manager | unaffected 2024 January-2025 Security Update; unaffected 2022 SU6 January-2025 Security Update |
CWE
CWE-36
References
- https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
ADP enrichment
No English description supplied.