CVE Vulnerabilities

CVE-2023-35083

Published: Oct 18, 2023 | Modified: Oct 25, 2023
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all previous versions potentially leading to the leakage of sensitive information.

Affected Software

Name Vendor Start Version End Version
Endpoint_manager Ivanti * 2022 (excluding)
Endpoint_manager Ivanti 2022 (including) 2022 (including)
Endpoint_manager Ivanti 2022-su1 (including) 2022-su1 (including)
Endpoint_manager Ivanti 2022-su2 (including) 2022-su2 (including)
Endpoint_manager Ivanti 2022-su3 (including) 2022-su3 (including)

References