CVE-2023-35082 PoC — Ivanti EPMM 授权问题漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35082.yaml

Associated Vulnerability

Title:Ivanti EPMM 授权问题漏洞 (CVE-2023-35082)
Description:Ivanti EPMM是美国Ivanti公司的一个移动管理软件引擎。 Ivanti EPMM 11.10及之前版本存在安全漏洞，该漏洞源于存在身份验证绕过漏洞，允许未经授权的用户在未经正确身份验证的情况下访问应用程序的受限功能或资源。

Description

Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, Since CVE-2023-35082 arises from the same place as CVE-2023-35078, specifically the permissive nature of certain entries in the mifs web application’s security filter chain.

File Snapshot


 id: CVE-2023-35082

info:
  name: MobileIron Core - Remote Unauthenticated API Access
  author: Dhiy

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!