Ivanti Releases Urgent Patch for EPMM Zero-Day Vulnerability Under Active Exploitation

Ivanti is warning end users to update their Endpoint Supervisor Cell (EPMM) cell gadget administration software program (formerly MobileIron Core) to the newest edition that fixes an actively exploited zero-day vulnerability.

Dubbed CVE-2023-35078, the issue has been explained as a distant unauthenticated API entry vulnerability that impacts presently supported variation 11.4 releases 11.10, 11.9, and 11.8 as effectively as more mature releases. It has the optimum severity score of 10 on the CVSS scale.

“An authentication bypass vulnerability in Ivanti EPMM enables unauthorized end users to entry restricted operation or assets of the application devoid of proper authentication,” the enterprise reported in a terse advisory.

“If exploited, this vulnerability allows an unauthorized, remote (internet-dealing with) actor to possibly entry users’ individually identifiable data and make limited variations to the server.”

The U.S. Cybersecurity and Infrastructure Security Company (CISA) reported an adversary with entry to the API paths could exploit them to get individually identifiable information (PII) these kinds of as names, phone figures, and other cellular device information for buyers on a vulnerable method.

Approaching WEBINARShield From Insider Threats: Grasp SaaS Security Posture Management

Concerned about insider threats? We’ve bought you covered! Be part of this webinar to explore sensible strategies and the tricks of proactive security with SaaS Security Posture Management.

Join Right now

“An attacker can also make other configuration adjustments, which includes producing an EPMM administrative account that can make further more changes to a susceptible procedure,” CISA extra.

The Utah-centered IT computer software company more mentioned that it can be conscious of lively exploitation of the bug towards a “very constrained selection of clients” but did not disclose added details about the character of the attacks or the identification of the danger actor guiding them.

Patches for the issue have been manufactured out there in variations 11.8.1.1, 11.9.1.1, and 11.10..2, according to security researcher Kevin Beaumont.

Identified this report intriguing? Abide by us on Twitter  and LinkedIn to read through much more special articles we post.

Some parts of this article are sourced from:
thehackernews.com