{"id":2395,"date":"2024-01-19T19:00:00","date_gmt":"2024-01-19T19:00:00","guid":{"rendered":"https:\/\/www.darkreading.com\/vulnerabilities-threats\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports"},"modified":"2024-01-19T19:00:00","modified_gmt":"2024-01-19T19:00:00","slug":"third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/01\/19\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports\/","title":{"rendered":"Third Ivanti Vulnerability Exploited in the Wild, CISA Reports"},"content":{"rendered":"
<\/a><\/div>\n
<\/div>\n

A critical vulnerability affecting Ivanti Endpoint Manager Mobile (EPMM), tracked as CVE-2023-35082, has been added to CISA’s <\/span>Known Exploited Vulnerabilities (KEV) Catalog<\/a><\/span>.<\/span><\/p>\n

The vulnerability has a CVSS score of 9.8 and is an authentication bypass that functions as a patch bypass for another vulnerability, CVE-2023-35078, with the highest CVSS score of 10. That vulnerability was exploited in the wild in April 2023 in cyberattacks against the Norwegian government.<\/span><\/p>\n

According to Rapid7, a cybersecurity firm that discovered and reported the vulnerability, CVE-2023-35082 can be chained together with CVE-2023-35081 to allow a threat actor to write malicious Web shell files, though it is unknown how these vulnerabilities are being exploited in the wild.<\/span><\/p>\n

All versions of Invanti Endpoint Manager are at risk of being compromised, including 11.10, 11.9, 11.8, and MobileIron Core 11.7. It’s recommended that <\/span>federal agencies apply patches<\/a><\/span> by the first week of February.<\/span><\/p>\n

This vulnerability comes just days after <\/span>Ivanti researchers reported two other zero-day vulnerabilities<\/a><\/span> \u2014 CVE-2023-46805 and CVE-2024-21887 \u2014 that are actively being exploited. Ivanti is providing mitigation resources for these flaws and reported that it will be released patches in a staggered approach on Jan. 22 and Feb. 19. <\/span><\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

A critical vulnerability affecting Ivanti Endpoint Manager Mobile (EPMM), tracked<\/p>\n","protected":false},"author":12,"featured_media":2396,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[809],"class_list":["post-2395","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dark-reading"],"featured_image_urls":{"full":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports.jpg?fit=1000%2C563&ssl=1",1000,563,false],"thumbnail":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports.jpg?resize=150%2C150&ssl=1",150,150,true],"medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports.jpg?fit=300%2C169&ssl=1",300,169,true],"medium_large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports.jpg?fit=640%2C360&ssl=1",640,360,true],"large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports.jpg?fit=640%2C360&ssl=1",640,360,true],"1536x1536":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports.jpg?fit=1000%2C563&ssl=1",1000,563,true],"2048x2048":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports.jpg?fit=1000%2C563&ssl=1",1000,563,true],"chromenews-featured":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports.jpg?fit=1000%2C563&ssl=1",1000,563,true],"chromenews-large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports.jpg?resize=825%2C563&ssl=1",825,563,true],"chromenews-medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports.jpg?resize=590%2C410&ssl=1",590,410,true]},"author_info":{"display_name":"Dark Reading","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/darkreading\/"},"category_info":"Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","jetpack_featured_media_url":"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/01\/third-ivanti-vulnerability-exploited-in-the-wild-cisa-reports.jpg?fit=1000%2C563&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2395","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=2395"}],"version-history":[{"count":0,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/2395\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media\/2396"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=2395"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=2395"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=2395"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}