CVE-2024-47908

概要

参考情報

• forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-47908-CVE-2024-11771 · Vendor Advisory

cloud services appliance のその他の脆弱性

• CVE-2025-22460高 7.8Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privil…
• CVE-2024-11771中 5.3Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality.
• CVE-2024-11773高 7.2SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to ru…
• CVE-2024-11772高 7.2Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges t…
• CVE-2024-11639緊急 9.8An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative…