leakixš¤·Ivanti MobileIron Core strikes back :
CVE-2023-35081 - Remote Arbitrary File Write (RCE)
We are seeing 3 new version being deployed :
11.10.0.3, 11.9.1.2 and 11.8.1.2
It seems that current exploitation is chained together with CVE-2023-35078 so the scope should be authenticated IF previously patched.
Sources:
- https://www.mnemonic.io/resources/blog/threat-advisory-remote-file-write-vulnerability-in-ivanti-epmm/
- https://forums.ivanti.com/s/article/KB-Arbitrary-File-Write-CVE-2023-35081?language=en_US
Thanks :
- @_SteveG_
Threat Advisory: Remote File Write Vulnerability in Ivanti EPMM (CVE-2023-35081)
mnemonic researchers have discovered a new zero day vulnerability in Ivanti Endpoint Manager Mobile (EPMM), formerly known as MobileIron Core. This is different from the Authentication Bypass vulnerability CVE-2023-35078 disclosed earlier this week.