CVE-2023-35078 (endpoint_manager_mobile)

Ivanti Endpoint Manager Mobile (EPMM), formerly MobileIron Core, through 11.10 allows remote attackers to obtain PII, add an administrative account, and change the configuration because of an authentication bypass, as exploited in the wild in July 2023. A patch is available.

account attackers authentication authentication bypass bypass change configuration cve cve-2023-35078 endpoint epmm exploited ivanti july july 2023 manager mobile mobileiron mobileiron core patch pii