CVE-2026-18129: CVE-2026-18129: güvenlik açığı

Açıklama (NVD)

Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker in a MITM position to leak credentials for external SQL connections.

Özet bilgiler

CVSS v3.1

8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

%1,46 (yüzdelik 74)

CWE

CWE-295

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• hub.ivanti.com
• CWE-295