Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

Ivanti Endpoint Manager Mobile allows admin file overwrite

CVE-2023-35081 · published 3 years ago · actively exploited
Summary

The Ivanti Endpoint Manager Mobile system lets a logged‑in administrator write files to any location on the server. This could let someone change configuration or place harmful files, especially when combined with another issue that skips login checks. Restrict admin access, apply the latest updates from Ivanti, and review file permissions on the server.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ivanti endpoint manager mobile (epmm) All versions
ivanti endpoint_manager_mobile >= 11.8.0, < 11.8.1.2
>= 11.9.0, < 11.9.1.2
>= 11.10.0, < 11.10.0.3
cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*
Original advisory text
Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
Ivanti Endpoint Manager Mobile (EPMM) contains a path traversal vulnerability that enables an authenticated administrator to perform malicious file writes to the EPMM server. This vulnerability can be used in conjunction with CVE-2023-35078 to bypass authentication and ACLs restrictions (if applicable).
References
Fix within
Internet-facing 3 days
and check for signs of compromise
Internal 14 days
  • Known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.2 High
Exploitation
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
64% chance of attack within 30 days
Type
CWE-22Path Traversal
Timeline
Published3 Aug 2023
Updated30 Sep 2026
First seen6 Mar 2026
Sources
CVE-2023-35081 · CISA KEV
CVE-2023-35081 · NVD
Track software like this
Free during beta