Skip to content
Sign in
Not rated

CVE-2022-21828 A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic…

Description

A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack vector in Incapptic Connect version 1.40.0, 1.39.1, 1.39.0, 1.38.1, 1.38.0, 1.37.1, 1.37.0, 1.36.0, 1.35.5, 1.35.4 and 1.35.3.

Affected products and versions

Product Affected versions Fixed in
Ivanti Incapptic Connect Versions not published

Other CVEs of Ivanti Incapptic Connect

The 3 CVEs of Ivanti Incapptic Connect →
CVE-2022-22572 A non-admin user with user management permission can escalate his privilege to admin user via password reset… Not rated CVE-2022-22571 An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic… Not rated
Track this CVE