Several security flaws have been identified across Ivanti’s product lineup, with the most critical potentially enabling an attacker to execute arbitrary code. If these vulnerabilities are successfully exploited, an attacker could run code within the context of the affected system.
- Ivanti Endpoint Manager Mobile (Ivanti EPMM) is a mobile management engine that facilitates management of devices, applications, and content.
- Ivanti Neurons is a cloud-based automation platform that brings IT operations and security management together into a single system of record.
- Ivanti Sentry is an inline gateway that manages, encrypts, and secures traffic flowing between mobile devices and back-end enterprise systems.
Depending on the privileges assigned to the system, an attacker could then install programs; view, alter, or delete data. Accounts that are configured with fewer user rights on the system may be less impacted than those running with administrative privileges.
