APP: Ivanti Endpoint Manager AgentPortal Insecure Deserialization
This signature detects attempts to exploit a known vulnerability against Ivanti. A successful attack can lead to arbitrary code execution.
Extended Description
Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.
Affected Products
Ivanti endpoint_manager
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
Ivanti