This vulnerability involves improper certificate validation in the core component of Ivanti Endpoint Manager, leading to cleartext transmission of sensitive information such as credentials for external SQL connections. An attacker positioned as a man-in-the-middle can exploit this to leak these credentials without authentication. The issue affects versions prior to 2024 SU7, though exact affected versions are not explicitly stated. The CVSS v3.1 base score is 8.1, indicating a high impact on confidentiality, integrity, and availability.

Successful exploitation can lead to credential leakage for external SQL connections, potentially allowing attackers to access or manipulate backend databases. This compromises confidentiality, integrity, and availability of affected systems. The attacker does not require authentication but must be able to intercept network traffic (man-in-the-middle).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented. Until a patch is available, minimizing exposure to man-in-the-middle attacks by securing network communications and using VPNs or encrypted tunnels may reduce risk.