CNNVD-202510-1995 Information
CNNVD ID
CNNVD-202510-1995
Related CVE
- CNNVD Published: 2025-10-14
Description (Chinese)
Ivanti EPMM是美国Ivanti公司的一款使 IT 部门能够为移动设备、应用程序和内容设置策略的产品。 Ivanti EPMM 12.6.0.2之前版本、12.5.0.4版本和12.4.0.4版本存在路径遍历漏洞，该漏洞源于管理面板存在路径遍历问题，可能导致远程认证管理员将数据写入磁盘意外位置。
Description (English)
Ivanti EPM is a product of the American company Ivanti that enables the IT sector to set strategies for mobile devices, applications and content. Prior to Ivanti EPM12.6.0.2, Versions 12.5.0.4 and 12.4.0.4 have path-to-path loop holes, which stem from the problem of managing the path-to-paths of the panel and may result in remote authentication administrators writing data to an unexpected location on disk.
Hazard Level
High
Vulnerability Type
路径遍历
Affected Vendor
Ivanti
Published
2025-10-14
Last Modified
2026-02-24
References
https://forums.ivanti.com/s/article/Security-Advisory-Endpoint-Manager-Mobile-EPMM-10-2025-Multiple-CVEs?language=en_US https://access.redhat.com/security/cve/cve-2025-10986