CVE-2025-4427: medium-severity vulnerability in Ivanti Endpoint Manager Mobile
Authentication Bypass
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
A security flaw in Ivanti Endpoint Manager Mobile allows attackers to access protected resources through the API without needing valid login credentials. This means unauthorized users could gain access to sensitive data or functions they shouldn't be able to reach.
An authentication bypass vulnerability in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and earlier enables unauthenticated or inadequately authenticated access to protected resources. The vulnerability stems from insufficient credential validation in the API, allowing attackers to circumvent authentication controls and access sensitive functionality or data without proper authorization.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.