7.2
Élevée
CVE-2024-9381 Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass…
Description
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| CSA (Cloud Services Appliance) 5.0 | premières → < 5.0.2 | 5.0.2 |
| endpoint_manager_cloud_services_appliance 5.0 | premières → < 5.0.2 | 5.0.2 |
Autres CVE de CSA (Cloud Services Appliance)
Les 6 CVE de CSA (Cloud Services Appliance) →
CVE-2025-22460
Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to…
7.8
Élevée
CVE-2024-9380
Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
7.2
Élevée
CVE-2024-9379
Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability
6.5
Moyenne
CVE-2024-8963
Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability
9.4
Critique