Skip to content
fr Sign in
9.6 Critical

CVE-2024-7569 An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows…

Description

An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated attacker to obtain the OIDC client secret via debug information.

Affected products and versions

Product Affected versions Fixed in
ITSM 2023.4 2023.4.0
neurons_for_itsm 2023.4 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of ITSM

The 5 CVEs of ITSM →
CVE-2024-7570 Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a… 8.3 High CVE-2024-22059 A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user to… 8.8 High CVE-2024-22060 An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated,… 8.7 High CVE-2023-46808 An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to… 9.9 Critical
Track this CVE