Ivanti Endpoint Manager Unbounded Resource Search Path Vulnerability Allowing Remote Code Execution

A vulnerability exists in Ivanti Endpoint Manager (EPM) versions prior to the January 2025 Security Update for both the 2024 and 2022 SU6 releases. This vulnerability allows remote authenticated attackers with admin privileges to execute code by exploiting an unbounded resource search path.

Impact

Exploitation of this vulnerability leads to unauthorized remote code execution on the affected system.

Remediation

Users can apply the Security Hot Patch available for their EPM version. For EPM 2024, the patch can be downloaded from the Ivanti License System (ILS) and applied to the core server and remote consoles. For EPM 2022 SU6, a similar process applies. After applying the patch, the Core Server should be rebooted.