CISA Adds One Known Exploited Vulnerability to Catalog

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability, CVE-2023-35082, to its Known Exploited Vulnerabilities Catalog. This vulnerability is an authentication bypass issue affecting Ivanti Endpoint Manager Mobile and MobileIron Core, which can be exploited by malicious actors. As per Binding Operational Directive (BOD) 22-01, Federal Civilian Executive Branch (FCEB) agencies are required to remediate identified vulnerabilities by the due date to protect their networks. Although the directive only applies to FCEB agencies, CISA strongly recommends that all organizations prioritize timely remediation of catalog vulnerabilities as part of their vulnerability management practice.