CVE-2024-9380

CVE-2024-9380 affects Ivanti Cloud Services Appliance (CSA) admin web console prior to 5.0.2. It is an OS command injection vulnerability that, when exploited by an authenticated admin, can lead to remote code execution. Related advisories document CVE-2024-9379 (SQL injection) and CVE-2024-9381 ...

CVE-2024-9379

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements...

CVE-2024-9379

SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements...

CVE-2024-9380

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

PT-2024-7353 · Ivanti · Ivanti Cloud Services Appliance

Name of the Vulnerable Software and Affected Versions: Ivanti Cloud Services Appliance versions prior to 5.0.2 Description: The issue is related to a SQL injection vulnerability in the admin web console of Ivanti Cloud Services Appliance. This vulnerability allows a remote authenticated attacker...

RHEL 8 / 9 : OpenShift Container Platform 4.15.35 (RHSA-2024:7182)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7182 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

CVE-2024-34153

Uncontrolled search path element in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34543

Improper access control in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34545

Improper input validation in some IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable information disclosure via adjacent access...

CVE-2024-36261

Improper access control in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-36247

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-28170

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-32666

NULL pointer dereference in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-32940

Improper access control in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-28170

Summary: CVE-2024-28170 is an improper access control vulnerability in Intel® RAID Web Console, affecting all versions. An authenticated user with local access may cause information disclosure. The issue is confirmed across multiple sources including NVD, Red Hat, and Intel’s advisory. Affected p...

CVE-2024-28170

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-28170

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-36261

The CVE-2024-36261 entry concerns Intel(R) RAID Web Console software with improper access control across all versions, enabling an authenticated user to potentially trigger a denial of service via adjacent access. Affected component: Intel RAID Web Console (web-based management tool for Intel RAI...

CVE-2024-36261

Improper access control in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-36247

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable denial of service via adjacent access...