Ivanti Cloud Services Appliance OS Command Injection Vulnerability

Mô tả

Tham khảo

• forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Service-Appliance-CSA-CVE-2024-8190 · Vendor Advisory
• cisa.gov/news-events/alerts/2024/09/13/ivanti-releases-security-update-cloud-services-appliance · US Government Resource
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-8190

Lỗ hổng khác của cloud services appliance

• CVE-2025-22460CAO 7.8Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privil…
• CVE-2024-47908CAO 7.2OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privilege…
• CVE-2024-11771TRUNG BÌNH 5.3Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality.
• CVE-2024-11773CAO 7.2SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to ru…
• CVE-2024-11772CAO 7.2Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges t…