9.8
CRITICAL
CVE-2024-13161
Ivanti EPM Remote Path Traversal Information Disclosure
Description

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.

INFO

Published Date :

Jan. 14, 2025, 6:15 p.m.

Last Modified :

Feb. 21, 2025, 3:15 p.m.

Source :

3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

3.9
Affected Products

The following products are affected by CVE-2024-13161 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Ivanti endpoint_manager
: Total Affected Vendor : 1 | Products : 1
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-13161.

URL Resource
https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities/

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-13161 vulnerability anywhere in the article.

  • The Register
Ivanti endpoint manager can become endpoint ravager, thanks to quartet of critical flaws

Security engineers have released a proof-of-concept exploit for four critical Ivanti Endpoint Manager bugs, giving those who haven't already installed patches released in January extra incentive to re ... Read more

Published Date: Feb 21, 2025 (1 day, 1 hour ago)
CVE-2024-13161 CVE-2024-13160 CVE-2024-13159 CVE-2024-10811 CVE-2024-53704
  • Cyber Security News
Ivanti Endpoint Manager Vulnerabilities Proof-of-Concept (PoC) Exploit Released

A cluster of four critical vulnerabilities in Ivanti Endpoint Manager (EPM) has entered a dangerous new phase with the public release of proof-of-concept (PoC) exploit code, escalating risks for organ ... Read more

Published Date: Feb 20, 2025 (1 day, 12 hours ago)
CVE-2024-13161 CVE-2024-13160 CVE-2024-13159 CVE-2024-10811
  • TheCyberThrone
Ivanti fixes Critical Security Vulnerabilities in EPM

OverviewIvanti has recently addressed multiple critical and high-severity vulnerabilities in its Endpoint Manager (EPM) software. These vulnerabilities could allow unauthorized access, remote code exe ... Read more

Published Date: Jan 16, 2025 (1 month ago)
CVE-2024-13161 CVE-2024-13160 CVE-2024-13159 CVE-2024-13181 CVE-2024-13180 CVE-2024-13179 CVE-2024-10811 CVE-2024-10630 CVE-2024-55591 CVE-2024-12398 ...+10 more CVE
  • The Hacker News
Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager

Vulnerability / Endpoint Security Ivanti has rolled out security updates to address several security flaws impacting Avalanche, Application Control Engine, and Endpoint Manager (EPM), including four c ... Read more

Published Date: Jan 16, 2025 (1 month ago)
CVE-2024-13161 CVE-2024-13160 CVE-2024-13159 CVE-2024-10811 CVE-2025-0070 CVE-2025-0066 CVE-2024-44243
  • security.nl
Ivanti waarschuwt voor kritieke path traversal-lekken in Endpoint Manager

Softwarebedrijf Ivanti waarschuwt klanten voor kritieke path traversal-kwetsbaarheden in Ivanti Endpoint Manager waardoor een ongeauthenticeerde aanvaller op afstand gevoelige informatie van organisat ... Read more

Published Date: Jan 15, 2025 (1 month ago)
CVE-2024-13161 CVE-2024-13160 CVE-2024-13159 CVE-2024-10811

The following table lists the changes that have been made to the CVE-2024-13161 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by 134c704f-9b21-4f2e-91b3-4a467353bcc0

    Feb. 21, 2025

    Action Type Old Value New Value
    Added Reference https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities/
  • New CVE Received by 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

    Jan. 14, 2025

    Action Type Old Value New Value
    Added Description Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
    Added CVSS V3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Added CWE CWE-36
    Added Reference https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2024-13161 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2024-13161 weaknesses.

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: