Neurons Patch For Intune
Monthly
An insufficiently protected endpoint in Ivanti Neurons Patch for Intune exposes sensitive authentication information to a remote attacker who already holds a valid low-privilege account on the application, per the assessed vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N, which limits the confirmed impact to confidentiality. Exploitation is low complexity and requires no user interaction, but it is gated by the need for an authenticated session and by network reachability to the management interface, so organizations that keep the console on a trusted admin network materially reduce exposure. No confirmed active exploitation (CISA KEV) and no public exploit code were identified at time of analysis, and the leaked credential material becomes dangerous mainly if it can be reused against the platform or federated services.
An insufficiently protected endpoint in Ivanti Neurons Patch for Intune exposes sensitive authentication information to a remote attacker who already holds a valid low-privilege account on the application, per the assessed vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N, which limits the confirmed impact to confidentiality. Exploitation is low complexity and requires no user interaction, but it is gated by the need for an authenticated session and by network reachability to the management interface, so organizations that keep the console on a trusted admin network materially reduce exposure. No confirmed active exploitation (CISA KEV) and no public exploit code were identified at time of analysis, and the leaked credential material becomes dangerous mainly if it can be reused against the platform or federated services.