KB-2258 Information about the Ivanti EPMM security advisory (CVE-2023-35078, CVE-2023-35081)

Elly Meng — Tue, 22 Aug 2023 20:13:10 GMT

Current Revision posted to Appian Knowledge Base by Elly Meng on 8/22/2023 8:13:10 PM

On 24-July-2023, Ivanti released a security advisory for all organizations using the Ivanti Endpoint Manager Mobile (EPMM) software, followed by a security advisory update on 28-July-2023.

Upon assessing the Appian platform against all details of the CVE, we can confirm that the Appian platform is not impacted by the vulnerability described in the Ivanti security advisory. We will continue to monitor the situation and provide any updates as appropriate.

Additional Notes:

The following CVE was released with additional information on the scope of the vulnerability:

CVE-2023-35078 (“Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability”)
CVE-2023-35081 (“Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability”)

Supporting Documentation:

Affected Versions

This article applies to all supported versions of Appian.

Last reviewed: August 22, 2023

Tags: Security

INT-2258 Information about the Ivanti EPMM security advisory (CVE-2023-35078, CVE-2023-35081)

Elly Meng — Tue, 22 Aug 2023 20:12:16 GMT

Revision 2 posted to Appian Knowledge Base by Elly Meng on 8/22/2023 8:12:16 PM

On 24-July-2023, Ivanti released a security advisory for all organizations using the Ivanti Endpoint Manager Mobile (EPMM) software, followed by a security advisory update on 28-July-2023.

Additional Notes:

The following CVE was released with additional information on the scope of the vulnerability:

Affected Versions

This article applies to all supported versions of Appian.

Last reviewed: August 22, 2023

Tags: Security

KB-XXXX Information about the Ivanti EPMM security advisory (CVE-2023-35078, CVE-2023-35081)

Elly Meng — Tue, 22 Aug 2023 20:10:41 GMT

Revision 1 posted to Appian Knowledge Base by Elly Meng on 8/22/2023 8:10:41 PM

On 24-July-2023, Ivanti released a security advisory for all organizations using the Ivanti Endpoint Manager Mobile (EPMM) software, followed by a security advisory update on 28-July-2023.

Additional Notes:

The following CVE was released with additional information on the scope of the vulnerability:

Affected Versions

This article applies to all supported versions of Appian.

Last reviewed: August 22, 2023

Tags: Security