Ivanti’s Comedy of Errors: Four Critical Flaws Exposed in Latest Security Updates!

Ivanti has released security updates to fix several vulnerabilities affecting Endpoint Manager (EPM), including four critical bugs rated 9.8 out of 10 on the CVSS scale. These flaws could allow remote attackers to leak sensitive information. Users are urged to update to the latest EPM versions to stay protected.

Pro Dashboard

Hot Take:

Ivanti’s latest security update is like a digital band-aid for the high-risk boo-boos of Endpoint Manager. With a CVSS score of 9.8 out of 10, these vulnerabilities are practically begging for a hacker’s attention. Don’t worry though, Ivanti’s new mantra is “Patch first, ask questions later!”

Key Points:

  • Ivanti addresses critical flaws in Avalanche, Application Control Engine, and Endpoint Manager.
  • Four critical bugs in EPM rated 9.8 on the CVSS scale could lead to information disclosure.
  • Vulnerabilities affect EPM versions before the 2024 January-2025 Security Update.
  • No evidence of the flaws being exploited in the wild, as per Ivanti.
  • SAP also released fixes for two critical vulnerabilities with a CVSS score of 9.9.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here
The Nimble Nerd
Confessional Booth of Our Digital Sins

Okay, deep breath, let's get this over with. In the grand act of digital self-sabotage, we've littered this site with cookies. Yep, we did that. Why? So your highness can have a 'premium' experience or whatever. These traitorous cookies hide in your browser, eagerly waiting to welcome you back like a guilty dog that's just chewed your favorite shoe. And, if that's not enough, they also tattle on which parts of our sad little corner of the web you obsess over. Feels dirty, doesn't it?