Threats tagged 'ghsa-wwfp-6c8c-qg35'

An improper access control vulnerability exists in Ivanti EPMM versions prior to 12.6.1.1, 12.7.0.1, and 12.8.0.1. This flaw allows a remote unauthenticated attacker to invoke arbitrary methods on the system, potentially leading to unauthorized actions. The vulnerability has a high severity rating with a CVSS score of 7. Exploitation requires high attack complexity but no privileges or user interaction. No public exploits or known active exploitation have been reported.