| Package | Affected versions | Patched versions |
|---|---|---|
| neurons for itsm | = 2023.2= 2023.3= 2023.4 |
Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a token that would allow access to ITSM as any user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free