An OS command injection vulnerability in Ivanti EPMM before 12.9.0.1, 12.8.0.3 and 12.7.0.2 versions allows a remote authenticated attacker to execute arbitrary commands as root
| Vendor | Product | Versions |
|---|---|---|
| ivanti | epmm | — |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| ivanti | endpoint manager mobile | cert_advisory | 90% |
Updated severity from HIGH to CRITICAL and noted that no exploit is available.
Initial creation
