9.1
Critical
CVE-2024-47908 OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated…
Description
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cloud Services Application 5.0 | earliest → < 5.0.5 | 5.0.5 |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Cloud Services Application
The 5 CVEs of Cloud Services Application →
CVE-2024-11771
Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted…
5.3
Medium
CVE-2024-11773
SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with…
9.1
Critical
CVE-2024-11772
Command injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker…
9.1
Critical
CVE-2024-11639
An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to…
10.0
Critical