Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CERTFR-2024-AVI-0967
Vulnerability from certfr_avis - Published: 2024-11-13 - Updated: 2024-11-13
De multiples vulnérabilités ont été découvertes dans les produits Ivanti. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Ivanti | Endpoint Manager (EPM) | Endpoint Manager (EPM) 2022 versions antérieures à SU6 sans le correctif de sécurité de novembre | ||
| Ivanti | Connect Secure (ICS) | Connect Secure (ICS) versions antérieures à 22.7R2.3 | ||
| Ivanti | Policy Secure (IPS) | Policy Secure (IPS) versions antérieures à 22.7R1.2 | ||
| Ivanti | Endpoint Manager (EPM) | Endpoint Manager (EPM) 2024 sans le correctif de sécurité de novembre | ||
| Ivanti | Secure Access Client (ISAC) | Secure Access Client (ISAC) versions antérieures à 22.7R4 |
References
| Title | Publication Time | Tags | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Endpoint Manager (EPM) 2022 versions ant\u00e9rieures \u00e0 SU6 sans le correctif de s\u00e9curit\u00e9 de novembre ",
"product": {
"name": "Endpoint Manager (EPM)",
"vendor": {
"name": "Ivanti",
"scada": false
}
}
},
{
"description": "Connect Secure (ICS) versions ant\u00e9rieures \u00e0 22.7R2.3",
"product": {
"name": "Connect Secure (ICS)",
"vendor": {
"name": "Ivanti",
"scada": false
}
}
},
{
"description": "Policy Secure (IPS) versions ant\u00e9rieures \u00e0 22.7R1.2",
"product": {
"name": "Policy Secure (IPS)",
"vendor": {
"name": "Ivanti",
"scada": false
}
}
},
{
"description": "Endpoint Manager (EPM) 2024 sans le correctif de s\u00e9curit\u00e9 de novembre ",
"product": {
"name": "Endpoint Manager (EPM)",
"vendor": {
"name": "Ivanti",
"scada": false
}
}
},
{
"description": "Secure Access Client (ISAC) versions ant\u00e9rieures \u00e0 22.7R4",
"product": {
"name": "Secure Access Client (ISAC)",
"vendor": {
"name": "Ivanti",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2024-39712",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39712"
},
{
"name": "CVE-2024-11006",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11006"
},
{
"name": "CVE-2024-50328",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50328"
},
{
"name": "CVE-2024-11004",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11004"
},
{
"name": "CVE-2024-50330",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50330"
},
{
"name": "CVE-2024-38655",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38655"
},
{
"name": "CVE-2024-11007",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11007"
},
{
"name": "CVE-2024-9420",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9420"
},
{
"name": "CVE-2024-47907",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47907"
},
{
"name": "CVE-2024-34780",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34780"
},
{
"name": "CVE-2024-8539",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8539"
},
{
"name": "CVE-2024-11005",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-11005"
},
{
"name": "CVE-2024-9842",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9842"
},
{
"name": "CVE-2024-29211",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-29211"
},
{
"name": "CVE-2024-47909",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47909"
},
{
"name": "CVE-2024-32844",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-32844"
},
{
"name": "CVE-2024-32839",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-32839"
},
{
"name": "CVE-2024-47905",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47905"
},
{
"name": "CVE-2024-34782",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34782"
},
{
"name": "CVE-2024-37376",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37376"
},
{
"name": "CVE-2024-32847",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-32847"
},
{
"name": "CVE-2024-8495",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-8495"
},
{
"name": "CVE-2024-50326",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50326"
},
{
"name": "CVE-2024-38649",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38649"
},
{
"name": "CVE-2024-50323",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50323"
},
{
"name": "CVE-2024-34784",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34784"
},
{
"name": "CVE-2024-34787",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34787"
},
{
"name": "CVE-2024-7571",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-7571"
},
{
"name": "CVE-2024-9843",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-9843"
},
{
"name": "CVE-2024-37400",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37400"
},
{
"name": "CVE-2024-39709",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39709"
},
{
"name": "CVE-2024-50329",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50329"
},
{
"name": "CVE-2024-47906",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-47906"
},
{
"name": "CVE-2024-34781",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-34781"
},
{
"name": "CVE-2024-39710",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39710"
},
{
"name": "CVE-2024-32841",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-32841"
},
{
"name": "CVE-2024-37398",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-37398"
},
{
"name": "CVE-2024-39711",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-39711"
},
{
"name": "CVE-2024-38654",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38654"
},
{
"name": "CVE-2024-50322",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50322"
},
{
"name": "CVE-2024-38656",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-38656"
},
{
"name": "CVE-2024-50327",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50327"
},
{
"name": "CVE-2024-50324",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-50324"
}
],
"initial_release_date": "2024-11-13T00:00:00",
"last_revision_date": "2024-11-13T00:00:00",
"links": [],
"reference": "CERTFR-2024-AVI-0967",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2024-11-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Ivanti. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Ivanti",
"vendor_advisories": [
{
"published_at": "2024-11-12",
"title": "Bulletin de s\u00e9curit\u00e9 Ivanti 000095993",
"url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs"
},
{
"published_at": "2024-11-12",
"title": "Bulletin de s\u00e9curit\u00e9 Ivanti november-2024-security-update",
"url": "https://www.ivanti.com/blog/november-2024-security-update"
},
{
"published_at": "2024-11-12",
"title": "Bulletin de s\u00e9curit\u00e9 Ivanti 000096001",
"url": "https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022"
}
]
}
CVE-2024-34781 (GCVE-0-2024-34781)
Vulnerability from cvelistv5 – Published: 2024-11-13 01:54 – Updated: 2024-11-19 04:55
VLAI
EPSS
Summary
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ivanti | EPM |
Affected:
2024 November Security Update , < 2024 November Security Update
(custom)
Affected: 2022 SU6 November Security Update , < 2022 SU6 November Security Update (custom) |
|
| ivanti | endpoint_manager |
Affected:
0 , < 2024_november_security_update
(custom)
Affected: 0 , < 2022_su6_november_security_update (custom) cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "endpoint_manager",
"vendor": "ivanti",
"versions": [
{
"lessThan": "2024_november_security_update",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "2022_su6_november_security_update",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-34781",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-18T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-19T04:55:57.271Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "EPM",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "2024 November Security Update",
"status": "affected",
"version": "2024 November Security Update",
"versionType": "custom"
},
{
"lessThan": "2022 SU6 November Security Update",
"status": "affected",
"version": "2022 SU6 November Security Update",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T01:54:45.516Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2024-34781",
"datePublished": "2024-11-13T01:54:45.516Z",
"dateReserved": "2024-05-09T01:04:06.435Z",
"dateUpdated": "2024-11-19T04:55:57.271Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-34782 (GCVE-0-2024-34782)
Vulnerability from cvelistv5 – Published: 2024-11-13 01:54 – Updated: 2024-11-19 04:55
VLAI
EPSS
Summary
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ivanti | EPM |
Affected:
2024 November Security Update , < 2024 November Security Update
(custom)
Affected: 2022 SU6 November Security Update , < 2022 SU6 November Security Update (custom) |
|
| ivanti | endpoint_manager |
Affected:
0 , < 2024_november_security_update
(custom)
Affected: 0 , < 2022_su6_november_security_update (custom) cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "endpoint_manager",
"vendor": "ivanti",
"versions": [
{
"lessThan": "2024_november_security_update",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "2022_su6_november_security_update",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-34782",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-18T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-19T04:55:59.747Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "EPM",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "2024 November Security Update",
"status": "affected",
"version": "2024 November Security Update",
"versionType": "custom"
},
{
"lessThan": "2022 SU6 November Security Update",
"status": "affected",
"version": "2022 SU6 November Security Update",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T01:54:45.386Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2024-34782",
"datePublished": "2024-11-13T01:54:45.386Z",
"dateReserved": "2024-05-09T01:04:06.435Z",
"dateUpdated": "2024-11-19T04:55:59.747Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-34784 (GCVE-0-2024-34784)
Vulnerability from cvelistv5 – Published: 2024-11-13 01:54 – Updated: 2024-11-19 04:56
VLAI
EPSS
Summary
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ivanti | EPM |
Affected:
2024 November Security Update , < 2024 November Security Update
(custom)
Affected: 2022 SU6 November Security Update , < 2022 SU6 November Security Update (custom) |
|
| ivanti | endpoint_manager |
Affected:
0 , < 2024_november_security_update
(custom)
Affected: 0 , < 2022_su6_november_security_update (custom) cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "endpoint_manager",
"vendor": "ivanti",
"versions": [
{
"lessThan": "2024_november_security_update",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "2022_su6_november_security_update",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-34784",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-18T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-19T04:56:05.016Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "EPM",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "2024 November Security Update",
"status": "affected",
"version": "2024 November Security Update",
"versionType": "custom"
},
{
"lessThan": "2022 SU6 November Security Update",
"status": "affected",
"version": "2022 SU6 November Security Update",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T01:54:45.555Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2024-34784",
"datePublished": "2024-11-13T01:54:45.555Z",
"dateReserved": "2024-05-09T01:04:06.436Z",
"dateUpdated": "2024-11-19T04:56:05.016Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-34787 (GCVE-0-2024-34787)
Vulnerability from cvelistv5 – Published: 2024-11-13 01:54 – Updated: 2024-11-19 04:55
VLAI
EPSS
Summary
Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Assigner
References
1 reference
Impacted products
3 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ivanti | EPM |
Affected:
2024 November Security Update , < 2024 November Security Update
(custom)
|
|
| Ivanti | EPM |
Affected:
2022 SU6 November Security Update , < 2022 SU6 November Security Update
(custom)
|
|
| ivanti | endpoint_manager |
Affected:
0 , < 2024_november_security_update
(custom)
Affected: 0 , < 2022_su6_november_security_update (custom) cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "endpoint_manager",
"vendor": "ivanti",
"versions": [
{
"lessThan": "2024_november_security_update",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "2022_su6_november_security_update",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-34787",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-18T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-19T04:55:48.661Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "EPM",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "2024 November Security Update",
"status": "affected",
"version": "2024 November Security Update",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "EPM",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "2022 SU6 November Security Update",
"status": "affected",
"version": "2022 SU6 November Security Update",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T01:54:45.416Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2024-34787",
"datePublished": "2024-11-13T01:54:45.416Z",
"dateReserved": "2024-05-09T01:04:06.436Z",
"dateUpdated": "2024-11-19T04:55:48.661Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-37376 (GCVE-0-2024-37376)
Vulnerability from cvelistv5 – Published: 2024-11-13 01:54 – Updated: 2024-11-19 04:55
VLAI
EPSS
Summary
SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Severity
7.2 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ivanti | EPM |
Affected:
2024 November Security Update , < 2024 November Security Update
(custom)
Affected: 2022 SU6 November Security Update , < 2022 SU6 November Security Update (custom) |
|
| ivanti | endpoint_manager |
Affected:
0 , < 2024_november_security_update
(custom)
Affected: 0 , < 2022_su6_november_security_update (custom) cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "endpoint_manager",
"vendor": "ivanti",
"versions": [
{
"lessThan": "2024_november_security_update",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"lessThan": "2022_su6_november_security_update",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-37376",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-18T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-19T04:55:56.052Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "EPM",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "2024 November Security Update",
"status": "affected",
"version": "2024 November Security Update",
"versionType": "custom"
},
{
"lessThan": "2022 SU6 November Security Update",
"status": "affected",
"version": "2022 SU6 November Security Update",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote authenticated attacker with admin privileges to achieve remote code execution."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T01:54:45.383Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2024-37376",
"datePublished": "2024-11-13T01:54:45.383Z",
"dateReserved": "2024-06-07T01:04:06.870Z",
"dateUpdated": "2024-11-19T04:55:56.052Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-37398 (GCVE-0-2024-37398)
Vulnerability from cvelistv5 – Published: 2024-11-13 01:54 – Updated: 2025-03-13 17:50
VLAI
EPSS
Summary
Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ivanti | Secure Access Client |
Affected:
22.7R4 , < 22.7R4
(custom)
|
|
| ivanti | secure_access_client |
Affected:
0 , < 22.7_r4
(custom)
cpe:2.3:a:ivanti:secure_access_client:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:ivanti:secure_access_client:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "secure_access_client",
"vendor": "ivanti",
"versions": [
{
"lessThan": "22.7_r4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-37398",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-13T16:45:06.053110Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-13T17:50:08.929Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Secure Access Client",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "22.7R4",
"status": "affected",
"version": "22.7R4",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T01:54:45.406Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2024-37398",
"datePublished": "2024-11-13T01:54:45.406Z",
"dateReserved": "2024-06-08T01:04:07.093Z",
"dateUpdated": "2025-03-13T17:50:08.929Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-37400 (GCVE-0-2024-37400)
Vulnerability from cvelistv5 – Published: 2024-11-13 01:54 – Updated: 2024-11-13 16:57
VLAI
EPSS
Summary
An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to trigger an infinite loop, causing a denial of service.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ivanti | Connect Secure |
Affected:
22.7R2.3 , < 22.7R2.3
(custom)
|
|
| ivanti | connect_secure |
Affected:
22.7R2.3
cpe:2.3:a:ivanti:connect_secure:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:ivanti:connect_secure:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "connect_secure",
"vendor": "ivanti",
"versions": [
{
"status": "affected",
"version": "22.7R2.3"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-37400",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-13T16:56:03.123820Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T16:57:19.557Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Connect Secure",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "22.7R2.3",
"status": "affected",
"version": "22.7R2.3",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out of bounds read in Ivanti Connect Secure before version 22.7R2.3 allows a remote unauthenticated attacker to trigger an infinite loop, causing a denial of service."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T01:54:45.506Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2024-37400",
"datePublished": "2024-11-13T01:54:45.506Z",
"dateReserved": "2024-06-08T01:04:07.093Z",
"dateUpdated": "2024-11-13T16:57:19.557Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-38649 (GCVE-0-2024-38649)
Vulnerability from cvelistv5 – Published: 2024-11-13 01:54 – Updated: 2024-11-23 21:06
VLAI
EPSS
Summary
An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a remote unauthenticated attacker to cause a denial of service.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ivanti | Connect Secure |
Affected:
22.7R2.1 , < 22.7R2.1
(custom)
|
|
| ivanti | connect_secure |
Affected:
0 , < 22.7R2.1
(custom)
cpe:2.3:a:ivanti:connect_secure:-:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:ivanti:connect_secure:-:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "connect_secure",
"vendor": "ivanti",
"versions": [
{
"lessThan": "22.7R2.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-38649",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-13T17:02:35.525619Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T17:03:52.122Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Connect Secure",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "22.7R2.1",
"status": "affected",
"version": "22.7R2.1",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1(Not Applicable to 9.1Rx) allows a remote unauthenticated attacker to cause a denial of service."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-23T21:06:04.739Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2024-38649",
"datePublished": "2024-11-13T01:54:45.457Z",
"dateReserved": "2024-06-19T01:04:07.137Z",
"dateUpdated": "2024-11-23T21:06:04.739Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-38654 (GCVE-0-2024-38654)
Vulnerability from cvelistv5 – Published: 2024-11-13 01:54 – Updated: 2024-11-13 17:01
VLAI
EPSS
Summary
Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service.
Severity
4.4 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-125 - Out-of-bounds Read
Assigner
References
1 reference
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Ivanti | Secure Access Client |
Affected:
22.7R3 , < 22.7R3
(custom)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-38654",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-13T16:59:41.280532Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-125",
"description": "CWE-125 Out-of-bounds Read",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T17:01:06.962Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Secure Access Client",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "22.7R3",
"status": "affected",
"version": "22.7R3",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T01:54:45.470Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2024-38654",
"datePublished": "2024-11-13T01:54:45.470Z",
"dateReserved": "2024-06-19T01:04:07.138Z",
"dateUpdated": "2024-11-13T17:01:06.962Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-38655 (GCVE-0-2024-38655)
Vulnerability from cvelistv5 – Published: 2024-11-13 01:54 – Updated: 2024-11-23 21:06
VLAI
EPSS
Summary
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Severity
9.1 (Critical)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Assigner
References
1 reference
Impacted products
4 products
| Vendor | Product | Version | |
|---|---|---|---|
| Ivanti | Connect Secure |
Affected:
22.7R2.1 , < 22.7R2.1
(custom)
Affected: 9.1R18.9 , < 9.1R18.9 (custom) |
|
| Ivanti | Policy Secure |
Affected:
22.7R1.1 , < 22.7R1.1
(custom)
Affected: 9.1R18.9 , < 9.1R18.9 (custom) |
|
| ivanti | connect_secure |
Affected:
0 , < 22.7_r2.3
(custom)
cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:* |
|
| ivanti | policy_secure |
Affected:
0 , < 22.7_r1.2
(custom)
cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "connect_secure",
"vendor": "ivanti",
"versions": [
{
"lessThan": "22.7_r2.3",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "policy_secure",
"vendor": "ivanti",
"versions": [
{
"lessThan": "22.7_r1.2",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-38655",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-11-13T15:36:18.124138Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-88",
"description": "CWE-88 Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-13T15:37:13.168Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Connect Secure",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "22.7R2.1",
"status": "affected",
"version": "22.7R2.1",
"versionType": "custom"
},
{
"lessThan": "9.1R18.9",
"status": "affected",
"version": "9.1R18.9",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Policy Secure",
"vendor": "Ivanti",
"versions": [
{
"lessThan": "22.7R1.1",
"status": "affected",
"version": "22.7R1.1",
"versionType": "custom"
},
{
"lessThan": "9.1R18.9",
"status": "affected",
"version": "9.1R18.9",
"versionType": "custom"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution."
}
],
"metrics": [
{
"cvssV3_0": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
}
}
],
"providerMetadata": {
"dateUpdated": "2024-11-23T21:06:07.435Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2024-38655",
"datePublished": "2024-11-13T01:54:45.595Z",
"dateReserved": "2024-06-19T01:04:07.138Z",
"dateUpdated": "2024-11-23T21:06:07.435Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…