PT-2024-6217 · Ivanti · Ivanti Epm
Published
2024-09-10
·
Updated
2024-09-16
·
CVE-2024-32840
CVSS v3.1
9.1
Critical
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Ivanti EPM versions prior to 2022 SU6
Ivanti EPM versions prior to the 2024 September update
Description
The issue is related to an unspecified SQL injection in Ivanti EPM, which may allow a remote authenticated attacker with admin privileges to achieve remote code execution. This can be done by exploiting the vulnerability with a specially crafted query. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations
For Ivanti EPM versions prior to 2022 SU6, update to 2022 SU6 or later to resolve the issue.
For Ivanti EPM versions prior to the 2024 September update, apply the 2024 September update or later to resolve the issue.
As a temporary workaround, consider restricting access to the
loadMouseTable function until a patch is available.
Avoid using the vulnerable SQL query structure in the affected Ivanti EPM installations until the issue is resolved.Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ivanti Epm