Ivanti · Endpoint Manager (EPM)
CVE-2026-1603
Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
무엇인가
An authentication bypass in Ivanti Endpoint Manager before version 2024 SU5 allows a remote unauthenticated attacker to leak specific stored credential data.
CISA: Ivanti Endpoint Manager (EPM) contains an authentication bypass using an alternate path or channel vulnerability that could allow a remote unauthenticated attacker to leak specific stored credential data.
할 일
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
미국 연방 기관 조치 기한: 2026년 3월 23일
Ivanti의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 10. 30. | Missing Authentication for Critical Function | Connect Secure | 높음 7.0 | 0.5% |
| 2026. 10. 30. | Generation of Predictable Numbers or Identifiers | Connect Secure | 0.8% | |
| 2026. 10. 13. | Authentication Bypass by Spoofing | Connect Secure | 높음 8.6 | 89% |
| 2026. 6. 11. | OS Command Injection | Sentry | 치명적 10.0 | 99.9% |
| 2026. 5. 7. | Improper Input Validation | Endpoint Manager Mobile (EPMM) | 높음 7.2 | 34% |
| 2026. 4. 8. | Code Injection | Endpoint Manager Mobile (EPMM) | 치명적 9.8 | 99% |
| 2026. 1. 29. | Code Injection | Endpoint Manager Mobile (EPMM) | 치명적 9.8 | 99% |
| 2025. 5. 19. | Authentication Bypass | Endpoint Manager Mobile (EPMM) | 보통 5.3 | 99.9% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.