Ivanti Cloud Services Appliance OS Command Injection Vulnerability

概要

参考情報

• forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Service-Appliance-CSA-CVE-2024-8190 · Vendor Advisory
• cisa.gov/news-events/alerts/2024/09/13/ivanti-releases-security-update-cloud-services-appliance · US Government Resource
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-8190

cloud services appliance のその他の脆弱性

• CVE-2025-22460高 7.8Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privil…
• CVE-2024-47908高 7.2OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privilege…
• CVE-2024-11771中 5.3Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality.
• CVE-2024-11773高 7.2SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to ru…
• CVE-2024-11772高 7.2Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges t…