ZDI-25-031: Ivanti Endpoint Manager MyResolveEventHandler Untrusted Search Path Remote Code Execution Vulnerability
Published Jan 19, 2025
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Endpoint Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.2. The following CVEs are assigned: CVE-2024-13158.
Affected Software
1 affected component
Ivanti Endpoint Manager
Event History
Jan 19, 2025
Advisory Published
via ZDI·06:00 AM
Data Sourced
via ZDI·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-25-031?
The CVSS rating assigned to ZDI-25-031 is 7.2, indicating a high severity level.
2
How do I fix ZDI-25-031?
To fix ZDI-25-031, apply the latest security patches provided by Ivanti for Endpoint Manager.
3
What systems are affected by ZDI-25-031?
ZDI-25-031 affects installations of Ivanti Endpoint Manager that require authentication for exploitation.
4
Can ZDI-25-031 be exploited remotely?
Yes, ZDI-25-031 allows remote attackers to execute arbitrary code on the affected systems.
5
Is authentication required to exploit ZDI-25-031?
Yes, authentication is required to exploit the vulnerability ZDI-25-031.