5.3
Medium
CVE-2024-34788 An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to…
Description
An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to access potentially sensitive information
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| EPMM 12.1 | earliest → < 12.1.0.1 | 12.1.0.1 |
| endpoint_manager_mobile 12.1 | earliest → < 12.1.0.1 | 12.1.0.1 |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of EPMM
The 11 CVEs of EPMM →
CVE-2024-36130
An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker…
9.8
Critical
CVE-2024-36132
Insufficient verification of authentication controls in EPMM prior to 12.1.0.1 allows a remote attacker to bypass…
8.2
High
CVE-2024-36131
An insecure deserialization vulnerability in web component of EPMM prior to 12.1.0.1 allows an authenticated remote…
8.8
High
CVE-2023-46807
An SQL Injection vulnerability in web component of EPMM before 12.1.0.0 allows an authenticated user with appropriate…
6.7
Medium