Description (CNA)
Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ivanti / Endpoint Manager | unaffected 2024 January-2025 Security Update; unaffected 2022 SU6 January-2025 Security Update |
CWE
CWE-434
References
- https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
ADP enrichment
No English description supplied.
No references supplied.