CVE-2025-6996 | BDVDB-2026-285127 Detail
IvantiEndpoint Manager
Description#
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords.
Impact#
CAPEC-97 Cryptanalysis
Weaknesses#
- CWE-257 Storing Passwords in a Recoverable Format
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.