Ivanti Endpoint Manager SQL Injection Vulnerability Allowing Arbitrary Data Read

A SQL injection vulnerability has been identified in Ivanti Endpoint Manager (EPM) versions 2024 SU4 SR1 and prior. This vulnerability allows remote authenticated attackers to read arbitrary data from the database. The issue arises from improper handling of SQL queries, which could be exploited to manipulate database commands and access sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized access to database information, allowing attackers to read sensitive data that could be used for further attacks or to compromise user accounts.

Remediation

Users can update to Ivanti Endpoint Manager 2024 SU5 to address this vulnerability. The update is available through the Ivanti License System (ILS).