This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Ivanti EPM Cloud Services Application fixes 3 critical vulnerabilities
Ivanti Cloud Service Application (CSA) for Endpoint Manager (EPM) version 5.0.3 fixes 3 critical vulnerabilities [1].
Allows an unauthenticated remote attacker, due to insufficient authentication checks in the administrative web console, to gain access with administrator privileges [1].
The vulnerability is present in product:
- Ivanti Cloud Services Application; >=5, <5.0.3;
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2024-11639 at cve.org, NVD
- CWE-288: Authentication Bypass Using an Alternate Path or Channel at cwe.mitre.org
The vulnerability was publicly disclosed 10. 12. 2024.
Allows an authenticated remote attacker with administrator privileges to execute code in the administrative web console [1].
The vulnerability is present in product:
- Ivanti Cloud Services Application; >=5, <5.0.3;
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2024-11772 at cve.org, NVD
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') at cwe.mitre.org
The vulnerability was publicly disclosed 10. 12. 2024.
Allows an authenticated remote attacker with administrator privileges to execute arbitrary SQL queries in the administrative web console [1].
The vulnerability is present in product:
- Ivanti Cloud Services Application; >=5, <5.0.3;
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
More information:
- CVE-2024-11773 at cve.org, NVD
- CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') at cwe.mitre.org
The vulnerability was publicly disclosed 10. 12. 2024.
By CESNET, z.s.p.o. Michaela Ručková on 11. 12. 2024.