An authentication bypass in Ivanti Endpoint Manager, affecting all releases before 2024 SU5, permits a remote unauthenticated attacker to access and leak specific stored credential data. The breach compromises confidentiality by exposing sensitive authentication information.

Ivanti Endpoint Manager, all versions released prior to 2024 SU5, including the 2024 updates 2024 SU1 through 2024 SU4 and their security releases.

The CVSS score of 8.6 indicates high severity, and an EPSS score of 56% indicates a substantially higher likelihood of exploitation relative to other vulnerabilities. Listed in the CISA Known Exploited Vulnerabilities catalog, the issue has been monitored for active exploitation. Because the vulnerability allows remote unauthenticated access, an attacker can trigger a credential leak without needing valid credentials, and the elevated EPSS suggests that current risk of exploitation is significant, so patching should be prioritized accordingly.