We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-36130



Assignerhackerone
Reserved2024-05-21
Published2024-08-07
Updated2024-10-24

Description

An insufficient authorization vulnerability in web component of EPMM prior to 12.1.0.1 allows an unauthorized attacker within the network to execute arbitrary commands on the underlying operating system of the appliance.



CRITICAL: 9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Product status

Default status
unaffected

12.1.0.1 before 12.1.0.1
affected

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-for-Mobile-EPMM-July-2024

cve.org CVE-2024-36130

nvd.nist.gov CVE-2024-36130

Download JSON

Share this page
https://cve.threatint.com
Subscribe to our newsletter to learn more about our work.