Skip to content
fr Sign in
Not rated

CVE-2023-39335 A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated…

Description

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impersonate any existing user during the device enrollment process. This issue poses a significant security risk, as it enables unauthorized access and potential misuse of user accounts and resources.

Affected products and versions

Product Affected versions Fixed in
EPMM 11.10.0.0 No fix stated
EPMM 11.9.0.0 No fix stated
EPMM 11.8.0.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of EPMM

The 11 CVEs of EPMM →
CVE-2024-36130 An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker… 9.8 Critical CVE-2024-36131 An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote… 8.8 High CVE-2024-34788 An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to… 5.3 Medium CVE-2024-36132 Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass… 8.2 High
Track this CVE