Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all previous versions potentially leading to the leakage of sensitive information.
References
| Link | Resource |
|---|---|
| https://forums.ivanti.com/s/article/SA-2023-06-20-CVE-2023-35083?language=en_US | Vendor Advisory |
| https://forums.ivanti.com/s/article/SA-2023-06-20-CVE-2023-35083?language=en_US | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 08:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://forums.ivanti.com/s/article/SA-2023-06-20-CVE-2023-35083?language=en_US - Vendor Advisory |
25 Oct 2023, 00:14
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ivanti:endpoint_manager:2022:-:*:*:*:*:*:* cpe:2.3:a:ivanti:endpoint_manager:2022:su1:*:*:*:*:*:* cpe:2.3:a:ivanti:endpoint_manager:2022:su2:*:*:*:*:*:* cpe:2.3:a:ivanti:endpoint_manager:2022:su3:*:*:*:*:*:* cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:* |
|
| First Time |
Ivanti endpoint Manager
Ivanti |
|
| CWE | NVD-CWE-noinfo | |
| References | (MISC) https://forums.ivanti.com/s/article/SA-2023-06-20-CVE-2023-35083?language=en_US - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
18 Oct 2023, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-18 04:15
Updated : 2024-11-21 08:07
NVD link : CVE-2023-35083
Mitre link : CVE-2023-35083
CVE.ORG link : CVE-2023-35083
JSON object : View
Products Affected
ivanti
- endpoint_manager
CWE