8.4
Élevée
CVE-2025-6996 Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security…
Description
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Endpoint Manager | Versions non publiées |
Références
- forums.ivanti.com forums.ivanti.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Endpoint Manager
Les 71 CVE de Endpoint Manager →
CVE-2026-18129
Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows…
8.1
Élevée
CVE-2026-18127
External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote…
7.7
Élevée
CVE-2026-18125
An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote…
7.5
Élevée
CVE-2026-8111
SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authenticated…
8.8
Élevée