CVE-2023-39337

A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier to access and extract sensitive information, including device and environment configuration details, as well as secrets. This vulnerability poses a serious security risk, potentially exposing confidential data and system integrity.

Score

CVSS 3.1 9.1 Critical

Status

Modified - support@hackerone.com

Published

2023-11-15

Last modified

2024-08-29

Weaknesses

CWE-200

Affected products

• Endpoint Manager Mobile (Ivanti)
• Epmm (Ivanti)

References

• https://forums.ivanti.com/s/article/CVE-2023-39337?language=en_US