Horizon Alert
Summary of the vulnerability and why it matters
An absolute path traversal vulnerability has been identified in Ivanti Endpoint Manager. This flaw enables unauthorized remote access, potentially leading to the exposure of sensitive organizational information. The issue is present in specific versions of the software prior to the January 2025 security updates.
- Ivanti Endpoint Manager
- Path traversal flaw
- Sensitive information leakage
Attack Path
How an attacker could exploit the issue
An absolute path traversal vulnerability in Ivanti Endpoint Manager allows an unauthenticated attacker to access sensitive information. The vulnerability arises from how the system handles file paths, enabling an attacker to navigate beyond intended directories. This could lead to the exposure of confidential data stored on the affected systems.
- Exposed product accessible externally.
- Attacker sends crafted request.
- Sensitive information is leaked.
Live Threat
Current exploitation, exposure, and threat context
An absolute path traversal vulnerability in Ivanti Endpoint Manager allows remote, unauthenticated attackers to access sensitive information. This could expose confidential data to unauthorized parties, creating significant business risk. The nature of this vulnerability suggests potential for broad impact across affected systems.
- Likely attacker skill level: Low.
- Required access or conditions: None.
- Business risk or urgency: High.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
An absolute path traversal vulnerability has been identified in Ivanti Endpoint Manager, potentially allowing unauthenticated attackers to access sensitive information. This could impact the confidentiality of organizational data and the integrity of systems by exposing them to unauthorized access. The vendor has released security updates to address this vulnerability.
- Identify all Ivanti Endpoint Manager assets.
- Apply vendor security updates.
- Monitor for related issues.
