CVE-2024-13161 — Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CISA KEVExploited: confirmedIvanti

Ivanti Endpoint Manager (EPM) contains an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information.

Vulnerability details

Affected productsEndpoint Manager (EPM)
KEV remediation due2025-03-31