CVE-2024-47908

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-47908

creationtimestamp| type| source ---|---|--- 2025-02-11 15:23:30+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113985939700497507 2025-02-11 15:25:14+00:00| seen| https://infosec.exchange/users/cve/statuses/113985946487899400 2025-02-11 15:40:14+00:00| seen|...

CVE-2024-47908

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution...

CVE-2024-47908

Ivanti CSA pre-5.0.5 contains an OS command injection in the admin web console. An authenticated admin can remotely execute arbitrary commands, enabling remote code execution. Public advisories list the affected condition as path traversal in related CVEs, but the core issue here is OS command in...