4475 matches found
December 2024 Security Advisory Ivanti Workspace Control (IWC) (CVE-2024-8496)
Summary Ivanti has released updates for Workspace Control which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CV...
Ivanti Desktop and Server Management 安全漏洞
Ivanti Desktop and Server Management Ivanti DSM is a multi-platform, unified endpoint management solution from Ivanti Corporation. Ivanti Desktop and Server Management suffers from a privilege issue vulnerability that stems from insufficient privileges. An attacker could exploit this vulnerabilit...
PT-2024-17148 · Ivanti · Ivanti Connect Secure
Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.4 Description: The issue allows a remote authenticated attacker with admin privileges to achieve remote code execution through argument injection. Recommendations: For versions prior to 22.7R2.4,...
Ivanti Connect Secure 安全漏洞
Ivanti Connect Secure is a secure remote network connection tool from Ivanti USA. A code execution vulnerability exists in Ivanti Connect Secure, which can be exploited by an attacker to remotely execute code...
Ivanti CSA 安全漏洞
Ivanti CSA is a locally deployed virtual appliance from Ivanti, primarily designed to simplify the integration of IT service management with cloud services and to support the automation of IT processes to improve operational efficiency. An authentication bypass vulnerability exists in Ivanti CSA,...
PT-2024-39882 · Ivanti · Ivanti Connect Secure
Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.4 Description: The issue is related to insufficient server-side controls in the Secure Application Manager of Ivanti Connect Secure. This allows a remote authenticated attacker to bypass...
Ivanti Connect Secure 安全漏洞
Ivanti Connect Secure is a secure remote network connection tool from Ivanti USA. A security vulnerability exists in Ivanti Connect Secure versions prior to 22.7R2.3 and Ivanti Policy Secure versions prior to 22.7R1.2. An attacker can exploit the vulnerability to remotely execute code...
Ivanti Patch SDK 安全漏洞
Ivanti Patch SDK is a security tool development kit provided by Ivanti to help organizations automate system vulnerability remediation and patch management. Ivanti Patch SDK suffers from a privilege issue vulnerability that stems from insufficient privileges. An attacker could exploit this...
Ivanti Connect Secure 安全漏洞
Ivanti Connect Secure is a secure remote network connection tool from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Connect Secure versions prior to 22.7R2.4 that stems from insufficient server-side controls in Secure Application Manager. An attacker can exploit the...
Ivanti CSA 安全漏洞
Ivanti CSA is a locally deployed virtual appliance from Ivanti, primarily designed to simplify the integration of IT service management with cloud services and to support the automation of IT processes to improve operational efficiency. A code execution vulnerability exists in Ivanti CSA, which c...
PT-2024-16139 · Ivanti · Ivanti Patch Sdk
Name of the Vulnerable Software and Affected Versions: Ivanti Patch SDK versions prior to 9.7.703 Description: The issue is related to insufficient permissions in the Ivanti Patch SDK, allowing a local authenticated attacker to delete arbitrary files. Recommendations: For versions prior to 9.7.70...
Ivanti Sentry 安全漏洞
Ivanti Sentry is an in-line gateway from Ivanti USA, Inc. It is used to manage, encrypt and protect traffic between mobile devices and back-end enterprise systems. A security vulnerability exists in Ivanti Sentry that stems from insecure privilege management. An attacker could exploit the...
PT-2024-38426 · Ivanti · Ivanti Dsm
Name of the Vulnerable Software and Affected Versions: Ivanti DSM versions prior to 2024.3.5740 Description: The issue is related to insufficient permissions in Ivanti DSM, allowing a local authenticated attacker to delete arbitrary files. Recommendations: For versions prior to 2024.3.5740, updat...
Ivanti CSA 安全漏洞
Ivanti CSA is a locally deployed virtual appliance from Ivanti that is designed to simplify the integration of IT service management with cloud services and support automated processes to improve operational efficiency. Ivanti CSA suffers from a SQL injection vulnerability that can be exploited b...
PT-2024-39081 · Ivanti · Ivanti Sentry
Name of the Vulnerable Software and Affected Versions: Ivanti Sentry versions prior to 9.20.2 Ivanti Sentry versions prior to 10.0.2 Ivanti Sentry versions prior to 10.1.0 Description: The issue allows a local authenticated attacker to modify sensitive application components due to insecure...
The vulnerability of Ivanti Connect Secure (formerly Pulse Connect Secure) and Ivanti Policy Secure, related to the implementation or modification of arguments, allows a perpetrator to execute arbitrary code.
The vulnerability of Ivanti Connect Secure formerly Pulse Connect Secure and Ivanti Policy Secure lies in the exploitation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Ivanti Connect Secure (formerly Pulse Connect Secure) and Ivanti Policy Secure, related to the implementation or modification of arguments, allows a perpetrator to execute arbitrary code.
The vulnerability of Ivanti Connect Secure formerly Pulse Connect Secure and Ivanti Policy Secure lies in the exploitation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Ivanti Connect Secure (formerly Pulse Connect Secure) and Ivanti Policy Secure, related to the implementation or modification of arguments, allows a perpetrator to execute arbitrary code.
The vulnerability of Ivanti Connect Secure formerly Pulse Connect Secure and Ivanti Policy Secure lies in the exploitation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Ivanti Connect Secure (formerly Pulse Connect Secure) and Ivanti Policy Secure, related to the implementation or modification of arguments, allows a perpetrator to execute arbitrary code.
The vulnerability of Ivanti Connect Secure formerly Pulse Connect Secure and Ivanti Policy Secure lies in the exploitation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of Ivanti Connect Secure (formerly Pulse Connect Secure) and Ivanti Policy Secure, related to the implementation or modification of arguments, allows a perpetrator to execute arbitrary code.
The vulnerability of Ivanti Connect Secure formerly Pulse Connect Secure and Ivanti Policy Secure lies in the exploitation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...