Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-39337

A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive informati

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hackerone

Description

A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well as secrets. This vulnerability poses a serious security risk, potentially exposing confidential data and system integrity.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ivanti EPMM

Default version status: unaffected

  • 11.10.0.0 to ≤ 11.10.0.0affected
  • 11.9.0.0 to ≤ 11.9.0.0affected
  • 11.8.0.0 to ≤ 11.8.0.0affected

References