Ivanti Endpoint Manager
Moderate fix2 remedies
cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*
Moderate fix2 remedies
- <= 2022 SU8
- <= 2024 SU2
Ivanti Endpoint Manager Improper Encryption Vulnerability Allowing Password Decryption
Vulnerability
Patched
A vulnerability exists in the agent of Ivanti Endpoint Manager in versions prior to 2024 SU3 and 2022 SU8 Security Update 1. This vulnerability arises from improper encryption practices, which enable a local authenticated attacker to decrypt passwords of other users.
Impact
Exploitation of this vulnerability allows for unauthorized decryption of user passwords, potentially leading to further unauthorized actions or access within the application or system.
Remediation
Users can upgrade to Ivanti Endpoint Manager 2024 SU3 or 2022 SU8 Security Update 1. The latest versions are available for download through the Ivanti License System.
Added: Jul 8, 2025, 5:23 PM
Updated: Jul 8, 2025, 5:23 PM
Vulnerability Rating
Custom Algorithm
spread
4.5impact
0.6exploitability
3.5remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.