Ivanti修補裝置管理平臺EPM重大層級漏洞
支付動態 · 2024-09-12
本週Ivanti發布9月份例行更新，其中，專門針對裝置管理系統Endpoint Manager的資安公告相當受到關注，因為本次修補的漏洞當中，有近三分之二的危險程度被列為重大層級
資安業者Ivanti本週發布9月份安全性更新公告，他們針對裝置管理系統Endpoint Manager（EPM）、安全通訊設備Cloud Service Appliance（CSA），以及使用者桌面環境管理工具Workspace Control（IWC）發布更新，其中，包含重大層級漏洞的EPM公告最值得留意。
該公司指出，EPM 2024、EPM 2022 SU5及之前版本當中，總共發現了16個漏洞，其中有10個是重大層級。根據CVSS風險評分的高低，最嚴重的是達到滿分（10分）的CVE-2024-29847，此問題出現在代理程式的入口網站，為未受信任資料的「解序列化（deserialization）」弱點，一旦攻擊者利用，就有機會在未通過身分驗證的情況下，遠端執行任意程式碼。
其餘9個重大層級的弱點，皆為SQL注入漏洞，通過身分驗證且具備管理權限的攻擊者，有機會遠端執行程式碼，CVSS風險評分都是9.1分。
針對上述漏洞，該公司已為EPM 2024發布了熱修補程式，並對於EPM 2022推出SU6更新，值得留意的是，EPM 2024的熱修補程式必須已安裝特定更新才能套用，對此，他們也規畫之後會提供EPM 2024更新套件SU1。
Popular articles
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
1spin4win grows its Latin American presence by partnering with Fortuna Juegos
Online Game
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
British gambling levy rates confirmed for each vertical
Regulation
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
GAT Expo CDMX 2026 Kicks Off Today in Mexico with a Sold-Out Opening Reception at Big Bola Casino Santa Fe
Marketing
PropellerAds Positions Itself as a Go-To Traffic Source for iGaming Advertisers Ahead of a High-Demand Season
Marketing
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
Global Game Connect (GGC) 2027 Officially Opens Sponsorship & Exhibition Opportunities in Sri Lanka!
HUIDU Focus
What’s on the SBC Summit Conference Agenda in 2026?
Marketing
