ZeroDay Findings
Sign inSign up

Findings

CVE-2023-35078

Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

Published Jul 25, 2023 · updated Aug 4, 2026 · ivanti endpoint manager mobile

Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device details for users on a vulnerable system. An attacker can also make other configuration changes including installing software and modifying security profiles on registered devices.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 25, 2023 · Catalog

    Detected

    Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device details for users on a vulnerable system. An attacker can also make ot

  2. Jul 25, 2023 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Aug 15, 2023 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Aug 4, 2026 · Catalog

    Updated

    Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device details for users on a vulnerable system. An attacker can also make ot

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Aug 15, 2023

Affected

  • cpe ivanti/endpoint manager mobileversion unspecified
  • vendor Ivanti Endpoint Manager Mobile (EPMM)version unspecified

Sources

  • CISA KEVCVE-2023-35078

    Ivanti Endpoint Manager Mobile (EPMM, previously branded MobileIron Core) contains an authentication bypass vulnerability that allows unauthenticated access to specific API paths. An attacker with access to these API paths can access personally identifiable information (PII) such as names, phone numbers, and other mobile device details for users on a vulnerable system. An attacker can also make ot

    cisa.gov
  • CVE.orgCVE-2023-35078

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-35078

    30-day exploitation probability 100.0%

    first.org
  • NIST NVDCVE-2023-35078

    An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication.

    nvd.nist.gov

References