| Package | Affected versions | Patched versions |
|---|---|---|
| endpoint manager | = 2022= 2024< 2022 | 2022 |
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free