Skip to content
fr Sign in
9.0 Critical

CVE-2024-38648 A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt…

Description

A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.

Affected products and versions

Product Affected versions Fixed in
DSM 2024.2 earliest → < 2024.2 2024.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of DSM

The 3 CVEs of DSM →
CVE-2024-29213 Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due… 7.8 High CVE-2024-29821 Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due… 7.8 High
Track this CVE