CVE-2024-13159: Path Traversal

Reference Links

• https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
• https://www.theregister.com/2025/02/21/ivanti_traversal_flaw_poc_exploit/
• https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities/

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-10811
• CVE-2024-13161
• CVE-2024-13160

Frequently Asked Questions

• What is the severity of CVE-2024-13159?

  The severity of CVE-2024-13159 is considered high due to its ability to allow remote unauthenticated attackers to leak sensitive information.

• How do I fix CVE-2024-13159?

  To fix CVE-2024-13159, users must upgrade to the Ivanti EPM version released after January 2024 or the January 2022 SU6 Security Update.

• What types of attacks can exploit CVE-2024-13159?

  CVE-2024-13159 can be exploited through absolute path traversal attacks, enabling attackers to access unauthorized files.

• Who is affected by CVE-2024-13159?

  Organizations using Ivanti Endpoint Manager (EPM) versions prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update are affected by CVE-2024-13159.

• What data is at risk with CVE-2024-13159?

  CVE-2024-13159 puts sensitive information at risk, as attackers may gain access to system files and configurations through path traversal.