CVE-2023-35082: Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability
First published: Tue Aug 15 2023(Updated: )
An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. This vulnerability is unique to CVE-2023-35078 announced earlier.
Credit: support@hackerone.com support@hackerone.com support@hackerone.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ivanti Endpoint Manager Mobile | <=11.10.0 | |
| Ivanti Endpoint Manager Mobile | =11.10 | |
| Ivanti Endpoint Manager Mobile | =11.9 | |
| Ivanti Endpoint Manager Mobile | =11.8 | |
| MobileIron Core | =11.7 and below | |
Remedy
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US
- https://www.bleepingcomputer.com/news/security/cisa-critical-ivanti-auth-bypass-bug-now-actively-exploited/
- https://www.bleepingcomputer.com/news/security/hackers-use-poc-exploits-in-attacks-22-minutes-after-release/
- https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older;
- https://nvd.nist.gov/vuln/detail/CVE-2023-35082
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is CVE-2023-35082?
CVE-2023-35082 is an authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allowing unauthorized users to access restricted functionality or resources without proper authentication.
How severe is CVE-2023-35082?
CVE-2023-35082 has a severity score of 9.8, indicating it is critical.
Which software is affected by CVE-2023-35082?
Ivanti Endpoint Manager Mobile version 11.10.0 and older is affected by CVE-2023-35082.
How can unauthorized users exploit CVE-2023-35082?
Unauthorized users can exploit CVE-2023-35082 by bypassing authentication and gaining access to restricted functionality or resources.
Is there a fix available for CVE-2023-35082?
Ivanti EPMM users should upgrade to a version newer than 11.10.0 to mitigate the authentication bypass vulnerability.
- collector/nvd-index
- agent/author
- agent/type
- collector/bleeping-computer
- source/BleepingComputer
- alias/CVE-2023-35082
- alias/CVE-2023-46805
- alias/CVE-2024-21887
- alias/CVE-2021-22893
- alias/CVE-2023-35078
- alias/CVE-2023-35081
- alias/CVE-2023-38035
- agent/weakness
- agent/title
- agent/remedy
- agent/description
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/news-ai
- alias/CVE-2023-50164
- alias/CVE-2022-33891
- alias/CVE-2023-29298
- alias/CVE-2023-38203
- alias/CVE-2023-26360
- alias/CVE-2024-27198
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/first-publish-date
- exploited/true
- ransomware/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/softwarecombine
- agent/event
- agent/tags
- collector/nvd-cve
- vendor/ivanti
- canonical/ivanti endpoint manager mobile
- version/ivanti endpoint manager mobile/11.10.0
- version/ivanti endpoint manager mobile/11.10
- version/ivanti endpoint manager mobile/11.9
- version/ivanti endpoint manager mobile/11.8
- vendor/mobileiron
- canonical/mobileiron core
- version/mobileiron core/11.7 and below
- canonical/ivanti endpoint manager mobile (epmm) and mobileiron core