Authentication Bypass in Ivanti Cloud Services Application

Executive Summary

Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete arbitrary trusted EPM Core certificate entries.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to add malicious certificates, enabling man-in-the-middle attacks or unauthorized access to sensitive data. They could also delete trusted certificates, disrupting legitimate services.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data access or tampering, violating GDPR's integrity and confidentiality requirements and HIPAA's safeguards for protected health information.

Useful 0 Not Useful 0

Mitigation Strategies

Update Ivanti Cloud Services Application to a version that includes authentication for certificate management. If an update is not available, restrict network access to the application and monitor for unauthorized certificate changes.

Useful 0 Not Useful 0