Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

Description

References

• packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html · Exploit
• packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html · Exploit
• forums.ivanti.com/s/article/SA-2021-12-02 · Mitigation
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2021-44529

Altre vulnerabilità di endpoint manager cloud services appliance

• CVE-2024-9381ALTO 7.2Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.
• CVE-2024-9380ALTO 7.2EXPLOITED (CISA KEV)An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker wit…
• CVE-2024-9379ALTO 7.2EXPLOITED (CISA KEV)SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to ru…
• CVE-2024-8963CRITICO 9.1EXPLOITED (CISA KEV)Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.