Описание
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates.
Уязвимые конфигурации
Конфигурация 1Версия до 12.6.1.1 (исключая)
Одно из
cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*
cpe:2.3:a:ivanti:endpoint_manager_mobile:12.7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ivanti:endpoint_manager_mobile:12.8.0.0:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00686
Низкий
8.9 High
CVSS3
9.1 Critical
CVSS3
Дефекты
CWE-295
Связанные уязвимости
CVSS3: 8.9
github
4 месяца назад
An Improper Certificate Validation in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to impersonate registered Sentry hosts and obtain valid CA-signed client certificates.
EPSS
Процентиль: 50%
0.00686
Низкий
8.9 High
CVSS3
9.1 Critical
CVSS3
Дефекты
CWE-295