CVE-2025-22459
08.04.2025, 15:15
Improper certificate validation in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows a remote unauthenticated attacker to intercept limited traffic between clients and servers.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ivanti | endpoint_manager | 𝑥 < 2022 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-296 - Improper Following of a Certificate's Chain of TrustThe software does not follow, or incorrectly follows, the chain of trust for a certificate back to a trusted root certificate, resulting in incorrect trust of any resource that is associated with that certificate.
- CWE-295 - Improper Certificate ValidationThe software does not validate, or incorrectly validates, a certificate.