CVE-2023-35078 PoC — Ivanti Endpoint Manager Mobile 授权问题漏洞

Source

https://github.com/synfinner/CVE-2023-35078

Associated Vulnerability

Title: Ivanti Endpoint Manager Mobile 授权问题漏洞 (CVE-2023-35078)
Description:An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.

Description

Easy and non-intrusive script to check for CVE-2023-35078

Readme

# CVE-2023-35078

This script ethically checks for the presence of cve-2023-35078 via requesting the `/ping` endpoint from the Ivanti EPMM API. 

`/ping` simply responds with the VSP version, rather than attemping to pull device or admin data.

Usage: `./CVE-2023-35078 <IP/Hostname>`

This script assumes https connections over default port.

## Setup

- Setup virtual env: `python3 -m venv env`
- Activate env: `source env/bin/activate`
- Install dependencies: `pip3 install -r requirements.txt`

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →