Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Metrics
Affected Vendors & Products
References
History
Sun, 01 Dec 2024 18:45:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution. | Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution. |
Sat, 23 Nov 2024 21:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution. | Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution. |
Wed, 13 Nov 2024 19:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Ivanti
Ivanti automation Ivanti connect Secure |
|
Weaknesses | CWE-88 | |
CPEs | cpe:2.3:a:ivanti:automation:*:*:*:*:*:*:*:* cpe:2.3:a:ivanti:connect_secure:-:*:*:*:*:*:*:* |
|
Vendors & Products |
Ivanti
Ivanti automation Ivanti connect Secure |
|
Metrics |
cvssV3_1
|
Wed, 13 Nov 2024 02:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution. | |
References |
| |
Metrics |
cvssV3_0
|

Status: PUBLISHED
Assigner: hackerone
Published: 2024-11-13T01:54:45.445Z
Updated: 2024-12-01T18:25:55.799Z
Reserved: 2024-06-19T01:04:07.138Z
Link: CVE-2024-38656

Updated: 2024-11-13T18:16:44.337Z

Status : Awaiting Analysis
Published: 2024-11-13T02:15:18.830
Modified: 2024-12-01T19:15:04.440
Link: CVE-2024-38656

No data.