Skip to content
fr Sign in
Not rated

CVE-2023-39337 A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled…

Description

A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well as secrets. This vulnerability poses a serious security risk, potentially exposing confidential data and system integrity.

Affected products and versions

Product Affected versions Fixed in
EPMM 11.10.0.0 No fix stated
EPMM 11.9.0.0 No fix stated
EPMM 11.8.0.0 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of EPMM

The 11 CVEs of EPMM →
CVE-2024-36130 An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker… 9.8 Critical CVE-2024-36131 An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote… 8.8 High CVE-2024-34788 An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to… 5.3 Medium CVE-2024-36132 Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass… 8.2 High
Track this CVE