CVE-2023-35078
Description
An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.
Severity: CRITICAL
CVE ID: CVE-2023-35078
CVSS Score: 9.8
CVSS Metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL
CVE ID: CVE-2023-35078
CVSS Score: 10.0
CVSS Metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Proof Of Concept
Nuclei Templates for CVE-2023-35078
Refrence: Project Discovery GitHub
vchan-in
CVE-2023-35078 Remote Unauthenticated API Access Vulnerability Exploit POC
Refrence: GitHub
lager1
Proof of concept script to check if the site is vulnerable to CVE-2023-35078
Refrence: GitHub
raytheon0x21
Tools to scanner & exploit cve-2023-35078
Refrence: GitHub
synfinner
Easy and non-intrusive script to check for CVE-2023-35078
Refrence: GitHub
emanueldosreis
Nmap script to exploit CVE-2023-35078 - Mobile Iron Core
Refrence: GitHub
Blue-number
Ivanti Endpoint Manager Mobile (EPMM) POC
Refrence: GitHub
0nsec
CVE-2023-35078 Remote Unauthenticated API Access vulnerability has been discovered in Ivanti Endpoint Manager Mobile (EPMM), formerly known as MobileIron Core.
Refrence: GitHub