CVE-2024-10811 | Ivanti EPM - Endpoint Manager Operational Intel

Executive Risk Summary

"A remote unauthenticated attacker can exploit an absolute path traversal vulnerability in Ivanti EPM to leak sensitive information. This vulnerability affects Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update."

Operational Audit Arsenal

Target Type Web Application

Target Asset Ivanti EPM Web Interface

Standard Path %programfiles%IvantiEPM

PowerShell

# 🛠️ Senior Engineer Universal Audit
# Target: Ivanti EPM Web Interface (Web Application)
$Targets = 'Ivanti EPM Web Interface'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Likely

Moderate

Internal Work Notes

Apply Ivanti EPM January-2025 Security Update or 2022 SU6 January-2025 Security Update to mitigate absolute path traversal vulnerability

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Official Advisoryhttps://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6

Official Advisoryhttps://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities/

Related Ivanti Threats

CVE-2024-11639 CVSS 10

Ivanti Cloud Services Application - Admin Web Console

CVE-2025-22467 CVSS 9.9

Ivanti Connect Secure - Connect Secure

CVE-2023-46808 CVSS 9.9

Ivanti Neurons for ITSM - File Upload Component

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.