CVE-2024-13160: Path Traversal

Reference Links

• https://www.theregister.com/2025/02/21/ivanti_traversal_flaw_poc_exploit/
• https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
• https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities/

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-10811
• CVE-2024-13161
• CVE-2024-13159

Frequently Asked Questions

• What is the severity of CVE-2024-13160?

  CVE-2024-13160 is considered a high severity vulnerability due to its potential for remote unauthenticated attackers to leak sensitive information.

• How do I fix CVE-2024-13160?

  To fix CVE-2024-13160, users should apply the January 2025 Security Update for Ivanti EPM or the 2022 SU6 January 2025 Security Update.

• Who is affected by CVE-2024-13160?

  CVE-2024-13160 affects users of Ivanti Endpoint Manager (EPM) versions prior to the January 2025 Security Update and the 2022 SU6 January 2025 Security Update.

• What kind of information can be leaked due to CVE-2024-13160?

  CVE-2024-13160 can allow remote attackers to leak sensitive information stored on the affected systems.

• Is authentication required to exploit CVE-2024-13160?

  No, CVE-2024-13160 can be exploited by remote unauthenticated attackers without needing any form of authentication.