Ivanti corrige fallas en Ivanti Endpoint Manager

On January 16, 2025, Ivanti announced that it has addressed several security vulnerabilities in its Ivanti Endpoint Manager. Among these vulnerabilities, four have been classified as critical, earning a CVSS score of 9.8 out of 10. This level of severity indicates a high risk, as successful exploitation could enable an unauthorized remote attacker to access sensitive information.

As of the announcement, there are no reports indicating that these vulnerabilities have been actively exploited by malicious actors. However, the potential for exploitation underscores the importance of swift action to mitigate risks associated with these vulnerabilities.

To protect systems, Ivanti recommends that users consult the provider’s security advisories for a detailed list of affected products. This information is crucial for organizations using Ivanti Endpoint Manager to understand which of their systems might be at risk and to take necessary precautions.

In light of the critical nature of these vulnerabilities, CERT-SE (the Computer Emergency Response Team for Sweden) has advised users to adhere to the recommendations provided by Ivanti. Specifically, they emphasize the urgency of prioritizing necessary security updates to ensure systems are patched and secure against potential threats.

Users are encouraged to stay informed and follow best practices for vulnerability management, which typically includes promptly applying updates and patches, monitoring security advisories, and maintaining an overall robust security posture.

For detailed insights on the vulnerabilities and the recommended updates, users can refer to Ivanti’s official security advisory available at their forums.

In summary, organizations using Ivanti Endpoint Manager should prioritize addressing these critical vulnerabilities to safeguard sensitive information and maintain the integrity of their systems. Regular updates and adherence to security advisories are essential steps in mitigating cybersecurity risks.

Enlace de la fuente, haz clic para tener más información

Artículos y alertas de seguridad

Consultar más contenidos y alertas

Alertas y noticias de seguridad de la información

Contacta

Contacta con nosotros para obtener soluciones integrales en IT y seguridad de la información

Estamos encantados de responder cualquier pregunta que puedas tener, y ayudarte a determinar cuáles de nuestros servicios se adaptan mejor a tus necesidades.

Nuestros beneficios:
¿Qué sucede a continuación?
1

Programamos una llamada según tu conveniencia.

2

Realizamos una reunión de descubrimiento y consultoría.

3

Preparamos una propuesta.

Agenda una consulta gratuita