PT-2024-4017 · Ivanti · Ivanti Endpoint Manager
Published
2024-04-03
·
Updated
2026-03-31
·
CVE-2024-29824
CVSS v3.1
10
Critical
| Vector | AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
Ivanti Endpoint Manager versions 2022 SU5 and prior
Description:
The issue is related to an unspecified SQL Injection vulnerability in the Core server of Ivanti Endpoint Manager. This vulnerability allows an unauthenticated attacker within the same network to execute arbitrary code. The vulnerability is actively exploited, with a CVSS score of 9.6, and federal agencies are advised to patch by a specific date. The vulnerability involves an SQL Injection flaw that malicious actors are actively exploiting, allowing unauthenticated attackers to execute code remotely.
Recommendations:
To resolve the issue for Ivanti Endpoint Manager versions 2022 SU5 and prior, apply the patch released by Ivanti to fix the SQL Injection vulnerability. As a temporary workaround, consider restricting access to the vulnerable Core server until the patch is applied. Additionally, implement general security best practices to minimize the risk of exploitation.
Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ivanti Endpoint Manager