6.7
Medium
CVE-2024-22026 A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell…
Description
A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary commands on the appliance.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EPMM 12.1 | earliest → < 12.1.0.0 | 12.1.0.0 |
| EPMM 12.0 | earliest → < 12.0.0.0 | 12.0.0.0 |
| EPMM 11.12 | earliest → < 11.12.0.1 | 11.12.0.1 |
| endpoint_manager_mobile | 12.1.0.0 | No fix stated |
| endpoint_manager_mobile | 12.0.0.0 | No fix stated |
| endpoint_manager_mobile | 11.12.0.1 | No fix stated |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of EPMM
The 11 CVEs of EPMM →
CVE-2024-36130
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker…
9.8
Critical
CVE-2024-36131
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote…
8.8
High
CVE-2024-34788
An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to…
5.3
Medium
CVE-2024-36132
Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass…
8.2
High