InfoSecBulletin Cybersecurity for mankind
CISA included three vulnerabilities in Ivanti Endpoint Manager—CVE-2024-13159, CVE-2024-13160, and CVE-2024-13161—in its Known Exploited Vulnerabilities catalog.
Federal agencies must address these vulnerabilities by March 31, 2025, according to CISA’s directive, although no direct ransomware connection has been established.
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
CISA updated its KEV catalog on March 10, 2025, adding three new vulnerabilities found in Ivanti Endpoint Manager, a popular enterprise software for managing endpoints.
The KEV catalog tracks actively exploited vulnerabilities, encouraging organizations to prioritize fixes to protect critical systems.
The vulnerabilities CVE-2024-13159, CVE-2024-13160, and CVE-2024-13161 are all path traversal issues
Each flaw allows an attacker to access sensitive files by changing file paths, which could expose important information like configuration data or credentials.
Action Required:
Organizations must follow Ivanti’s guidelines, comply with BOD 22-01 for cloud services, or stop using the service if patches are not available.
Deadline: Federal agencies must fix these vulnerabilities by March 31, 2025.
Date Added: They were all added to the KEV catalog on March 10, 2025, due to new evidence of exploitation.
Recommendations:
Monitor Ivanti’s support portal for updates. Limit unauthorized access to EPM instances using firewalls or VPNs. Review file access logs for path traversal attempts. The inclusion of CVE-2024-13159, CVE-2024-13160, and CVE-2024-13161 in CISA’s KEV catalog highlights the increasing risks to endpoint management systems.
Federal agencies have a three-week window to address issues. Enterprises using Ivanti EPM should quickly reduce risks and prevent data leaks from becoming major breaches.
