SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
Metrics
Affected Vendors & Products
References
History
Tue, 10 Dec 2024 20:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Tue, 10 Dec 2024 19:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements. | |
Weaknesses | CWE-89 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ivanti
Published: 2024-12-10T18:56:08.742Z
Updated: 2024-12-14T04:55:14.186Z
Reserved: 2024-11-26T15:22:21.265Z
Link: CVE-2024-11773
Vulnrichment
Updated: 2024-12-10T20:03:40.700Z
NVD
Status : Received
Published: 2024-12-10T19:15:19.943
Modified: 2024-12-10T19:15:19.943
Link: CVE-2024-11773
Redhat
No data.