CVE-2025-13661: Path Traversal
Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to write arbitrary files outside of the intended directory. User interaction is required.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti Endpoint Managerto a version that resolves this vulnerability.Fixed in 2024 SU4 SR1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13661?
CVE-2025-13661 has a severity rating of high due to the potential for remote authenticated attackers to write arbitrary files.
How do I fix CVE-2025-13661?
To fix CVE-2025-13661, upgrade to Ivanti Endpoint Manager version 2024 SU4 SR1 or later.
Who is affected by CVE-2025-13661?
CVE-2025-13661 affects users of Ivanti Endpoint Manager versions prior to 2024 SU4 SR1.
What type of vulnerability is CVE-2025-13661?
CVE-2025-13661 is a path traversal vulnerability that allows unauthorized file writing.
What conditions are required to exploit CVE-2025-13661?
Exploitation of CVE-2025-13661 requires remote authentication and user interaction.