NetSight
medium4.3

CVE-2024-8322

Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted…

Impact

Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated attacker to access restricted functionality.

Affected products

VendorProductAffected versions
IvantiEndpoint Manager
before 2022
Versions 2022, 2024

Weakness classification

References