CISA included three vulnerabilities in Ivanti Endpoint Manager—CVE-2024-13159, CVE-2024-13160, and CVE-2024-13161—in its Known Exploited Vulnerabilities catalog.
Federal agencies must address these vulnerabilities by March 31, 2025, according to CISA’s directive, although no direct ransomware connection has been established.
By infosecbulletin
/ Monday , June 23 2025
A hacking group reportedly linked to Russian government has been discovered using a new phishing method that bypasses two-factor authentication...
Read More
By infosecbulletin
/ Wednesday , June 18 2025
Russian cybersecurity experts discovered the first local data theft attacks using a modified version of legitimate near field communication (NFC)...
Read More
By infosecbulletin
/ Tuesday , June 17 2025
Cybersecurity researcher Jeremiah Fowler discovered an unsecured database with 170,360 records belonging to a real estate company. It contained personal...
Read More
By infosecbulletin
/ Tuesday , June 17 2025
GreyNoise found attempts to exploit CVE-2023-28771, a vulnerability in Zyxel's IKE affecting UDP port 500. The attack centers around CVE-2023-28771,...
Read More
By infosecbulletin
/ Tuesday , June 17 2025
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently included two high-risk vulnerabilities in its Known Exploited Vulnerabilities (KEV)...
Read More
By infosecbulletin
/ Monday , June 16 2025
SafetyDetectives’ Cybersecurity Team discovered a public post on a clear web forum in which a threat actor claimed to have...
Read More
By infosecbulletin
/ Sunday , June 15 2025
WestJet, Canada's second-largest airline, is looking into a cyberattack that has affected some internal systems during its response to the...
Read More
By infosecbulletin
/ Saturday , June 14 2025
Resecurity found 7.4 million records of Paraguayan citizens' personal information leaked on the dark web today. Last week, cybercriminals attempted...
Read More
By infosecbulletin
/ Friday , June 13 2025
HashiCorp has revealed a critical vulnerability in its Nomad tool that may let attackers gain higher privileges by misusing the...
Read More
By infosecbulletin
/ Friday , June 13 2025
SoftBank has disclosed that personal information of more than 137,000 mobile subscribers—covering names, addresses, and phone numbers—might have been leaked...
Read More
CISA updated its KEV catalog on March 10, 2025, adding three new vulnerabilities found in Ivanti Endpoint Manager, a popular enterprise software for managing endpoints.
The KEV catalog tracks actively exploited vulnerabilities, encouraging organizations to prioritize fixes to protect critical systems.
The vulnerabilities CVE-2024-13159, CVE-2024-13160, and CVE-2024-13161 are all path traversal issues
Each flaw allows an attacker to access sensitive files by changing file paths, which could expose important information like configuration data or credentials.
Action Required:
Organizations must follow Ivanti’s guidelines, comply with BOD 22-01 for cloud services, or stop using the service if patches are not available.
Deadline: Federal agencies must fix these vulnerabilities by March 31, 2025.
Date Added: They were all added to the KEV catalog on March 10, 2025, due to new evidence of exploitation.
Recommendations:
Monitor Ivanti’s support portal for updates. Limit unauthorized access to EPM instances using firewalls or VPNs. Review file access logs for path traversal attempts. The inclusion of CVE-2024-13159, CVE-2024-13160, and CVE-2024-13161 in CISA’s KEV catalog highlights the increasing risks to endpoint management systems.
Federal agencies have a three-week window to address issues. Enterprises using Ivanti EPM should quickly reduce risks and prevent data leaks from becoming major breaches.