Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

Mô tả

Tham khảo

• forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381 · Vendor Advisory
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-9380

Lỗ hổng khác của endpoint manager cloud services appliance

• CVE-2024-9381CAO 7.2Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.
• CVE-2024-9379CAO 7.2ĐANG BỊ KHAI THÁC (CISA KEV)SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to ru…
• CVE-2024-8963NGHIÊM TRỌNG 9.1ĐANG BỊ KHAI THÁC (CISA KEV)Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.
• CVE-2021-44529NGHIÊM TRỌNG 9.8ĐANG BỊ KHAI THÁC (CISA KEV)A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code wit…