PT-2024-4015 · Ivanti · Ivanti Endpoint Manager

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager versions prior to 2022 SU5 Description: The issue is related to a SQL Injection vulnerability in the GetRulesetsSQL method of Ivanti Endpoint Manager, which fails to properly protect the SQL query structure. This allow...