Ivanti Endpoint Manager
Moderate fix2 remedies
cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*
Moderate fix2 remedies
- <= 2022 SU6
- <= 2024
Ivanti Endpoint Manager Improper Certificate Validation Vulnerability Allowing Traffic Interception
Vulnerability
Patched
A vulnerability exists in Ivanti Endpoint Manager versions 2022 SU6 and prior, as well as in the 2024 release, due to improper validation of certificates. This flaw enables remote, unauthenticated attackers to intercept limited traffic between clients and servers.
Impact
Exploitation of this vulnerability allows for interception of traffic between clients and servers, potentially leading to unauthorized access to sensitive information.
Remediation
Users can upgrade to Ivanti Endpoint Manager 2022 SU8 or Ivanti Endpoint Manager 2024 SU2. The latest versions are available for download through the Ivanti License System.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
4.5impact
0.6exploitability
5.6remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.