CVE-2024-34788
Published: 07 August 2024
Summary
CVE-2024-34788 is a medium-severity Improper Authentication (CWE-287) vulnerability in Ivanti Endpoint Manager Mobile. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 7.6% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
An improper authentication vulnerability affects the web component of Ivanti Endpoint Manager for Mobile (EPMM) versions prior to 12.1.0.1. Tracked as CVE-2024-34788, the flaw carries a CVSS 3.1 score of 6.5 and maps to CWE-287 and CWE-200, allowing exposure of potentially sensitive information due to missing or insufficient authentication checks.
A remote attacker with low privileges can exploit the issue over the network without user interaction, achieving high-impact disclosure of confidential data while leaving integrity and availability untouched.
The referenced Ivanti security advisory at https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-for-Mobile-EPMM-July-2024 addresses mitigation steps for the affected EPMM releases.
The EPSS score sits at 0.0816 with an identical peak value, indicating no material increase in observed exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-35054
Vulnerability details
An improper authentication vulnerability in web component of EPMM prior to 12.1.0.1 allows a remote malicious user to access potentially sensitive information
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Literacy training teaches users to recognize and avoid actions that result in unauthorized exposure of sensitive information.
Session auditing enables detection of unauthorized exposure or access to sensitive information during user activities.
Audit record review and analysis can detect unauthorized exposure or access to sensitive information.
Penetration testing probes authentication mechanisms for bypasses, allowing identification and fixing of improper authentication issues.
The integrated analysis team enables faster detection and containment of incidents involving unauthorized exposure of sensitive information, limiting attacker success in exploiting such weaknesses.
Security architectures must specify authentication requirements and approaches, making systemic authentication weaknesses harder to introduce.
Trained staff understand data-handling requirements and are less likely to expose sensitive information through misconfiguration or poor design.
Hunting detects anomalous authentication patterns or successful bypasses that allow persistent unauthorized entry.