{"cvss":10.0,"datePublished":"2024-01-18","dateUpdated":"2024-01-18","description":"Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core contain an authentication bypass vulnerability that allows unauthorized users to access restricted functionality or resources of the application.","dueDate":"2024-02-08","id":"CVE-2023-35082","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Known","notes":"https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older;  https://nvd.nist.gov/vuln/detail/CVE-2023-35082","product":"Endpoint Manager Mobile (EPMM) and MobileIron Core","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability","vendor":"Ivanti"}