Jan 18, 2024

Started

• Closed✓Patched

  Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass

  Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application. Added to the CISA KEV catalog on 2024-01-18. CISA lists known use in ransomware campaigns. CVE-2023-35082 was assigned before 2024; the KEV listing came in 2024.

  Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core·Closed Jan 18, 2024·updated Jan 18, 2024