{"id":858,"date":"2023-07-25T12:48:44","date_gmt":"2023-07-25T12:48:44","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/ivanti-je-izdao-zakrpu-za-mobileiron-ranjivost-nultog-dana\/"},"modified":"2026-11-04T08:52:53","modified_gmt":"2026-11-04T08:52:53","slug":"ivanti-je-izdao-zakrpu-za-mobileiron-ranjivost-nultog-dana","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/ivanti-je-izdao-zakrpu-za-mobileiron-ranjivost-nultog-dana\/","title":{"rendered":"Ivanti je izdao zakrpu za MobileIron ranjivost nultog dana"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>Ivanti<\/strong>, softverska tvrtka iz SAD-a, \u00a0<a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/ivanti-patches-mobileiron-zero-day-bug-exploited-in-attacks\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>izdala je zakrpu za<\/strong> <strong>ranjivost<\/strong><\/a><strong> koja omogu\u0107uje zaobila\u017eenje autentifikacije na mobilnim ure\u0111ajima koji koriste Endpoint Manager Mobile (EPMM) paket (biv\u0161i MobileIron Core).<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Zakrpa se odnosi na ranjivost <strong><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2023-35078\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2023-35078<\/a><\/strong> te onemogu\u0107uje udaljeni pristup API-u bez autentifikacije. Napada\u010d iskori\u0161tavanjem ove ranjivosti mo\u017ee pristupiti osobnim podacima klijenata i napraviti odre\u0111ene promjene na serveru.<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure data-wp-context=\"{&quot;imageId&quot;:&quot;6af19ebbead12&quot;}\" data-wp-interactive=\"core\/image\" data-wp-key=\"6af19ebbead12\" class=\"aligncenter wp-lightbox-container\"><img decoding=\"async\" data-wp-class--hide=\"state.isContentHidden\" data-wp-class--show=\"state.isContentVisible\" data-wp-init=\"callbacks.setButtonStyles\" data-wp-on--click=\"actions.showLightbox\" data-wp-on--load=\"callbacks.setButtonStyles\" data-wp-on--pointerdown=\"actions.preloadImage\" data-wp-on--pointerenter=\"actions.preloadImageWithDelay\" data-wp-on--pointerleave=\"actions.cancelPreload\" data-wp-on-window--resize=\"callbacks.setButtonStyles\" src=\"https:\/\/www.bleepstatic.com\/images\/news\/u\/1109292\/2023\/Internet-exposed%20MobileIron%20user%20portals.jpg\" alt=\"Internet-exposed MobileIron user portals\"\/><button\n\t\t\tclass=\"lightbox-trigger\"\n\t\t\ttype=\"button\"\n\t\t\taria-haspopup=\"dialog\"\n\t\t\tdata-wp-bind--aria-label=\"state.thisImage.triggerButtonAriaLabel\"\n\t\t\tdata-wp-init=\"callbacks.initTriggerButton\"\n\t\t\tdata-wp-on--click=\"actions.showLightbox\"\n\t\t\tdata-wp-style--right=\"state.thisImage.buttonRight\"\n\t\t\tdata-wp-style--top=\"state.thisImage.buttonTop\"\n\t\t>\n\t\t\t<svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"12\" height=\"12\" fill=\"none\" viewbox=\"0 0 12 12\">\n\t\t\t\t<path fill=\"#fff\" d=\"M2 0a2 2 0 0 0-2 2v2h1.5V2a.5.5 0 0 1 .5-.5h2V0H2Zm2 10.5H2a.5.5 0 0 1-.5-.5V8H0v2a2 2 0 0 0 2 2h2v-1.5ZM8 12v-1.5h2a.5.5 0 0 0 .5-.5V8H12v2a2 2 0 0 1-2 2H8Zm2-12a2 2 0 0 1 2 2v2h-1.5V2a.5.5 0 0 0-.5-.5H8V0h2Z\" \/>\n\t\t\t<\/svg>\n\t\t<\/button><figcaption>BleepingComputer: vi\u0161e od 2900 ranjivih sustava MobileIron korisnika (Shodan)<\/figcaption><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Nakon izdavanje zakrpe, <strong><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/norway-says-ivanti-zero-day-was-used-to-hack-govt-it-systems\/\" target=\"_blank\" rel=\"noreferrer noopener\">Norve\u0161ka je potvrdila da je za napad na softversku platformu koju koristi 12 norve\u0161kih ministarstava iskori\u0161tena ova ranjivost.<\/a><\/strong> Napadom ipak nisu zahva\u0107eni Ured norve\u0161kog premijera, Ministarstvo obrane, Ministarstvo pravosu\u0111a i Ministarstvo vanjskih poslova.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ranjive su verzije paketa starije od verzije 11.8.1.0. Svima se savjetuje da bez odga\u0111anja nadograde svoje sustave kako ne bi postali \u017ertve ove ranjivosti<\/strong><\/p>","protected":false},"excerpt":{"rendered":"<p>Ivanti, softverska tvrtka iz SAD-a, \u00a0izdala je zakrpu za ranjivost koja omogu\u0107uje zaobila\u017eenje autentifikacije na mobilnim ure\u0111ajima koji koriste Endpoint Manager Mobile (EPMM) paket (biv\u0161i MobileIron Core). Zakrpa se odnosi na ranjivost CVE-2023-35078 te onemogu\u0107uje udaljeni pristup API-u bez autentifikacije. Napada\u010d iskori\u0161tavanjem ove ranjivosti mo\u017ee pristupiti osobnim podacima klijenata i napraviti odre\u0111ene promjene na serveru. [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1361,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-858","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/858","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=858"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/858\/revisions"}],"predecessor-version":[{"id":1364,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/858\/revisions\/1364"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1361"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=858"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=858"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=858"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=858"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=858"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}