Ivanti EPM Update Patches Remotely Exploitable Flaws
Summary
Ivanti has released an update for its Endpoint Manager (EPM) product to address remotely exploitable vulnerabilities. These flaws could allow attackers to leak credentials for external SQL connections or cause an agent service to crash.
IFF Assessment
The discovery and potential exploitation of vulnerabilities in endpoint management software pose a risk to organizations' security posture.
Severity
The vulnerabilities are remotely exploitable and could lead to credential leakage and denial of service, impacting confidentiality and availability. The exact CVSS score is not provided, but these characteristics suggest a high severity.
Defender Context
Organizations using Ivanti EPM should prioritize applying the latest updates to mitigate the risks associated with these remotely exploitable flaws. Defenders should be aware of potential post-exploitation activities, such as credential theft and service disruption, if systems are compromised before patching.