Ivanti has confirmed that its end-of-life MobileIron Core versions 11.2 and older are being impacted by a new critical authentication bypass vulnerability, which could be leveraged to compromise mobile device users’ personally identifiable information and enable webshell deployment in impacted servers, reports BleepingComputer. No fixes are being planned for the vulnerability, tracked as CVE-2023-35082, according to Ivanti, which said that remediations are available in newest Endpoint Manager Mobile version.

Source: SC Magazine