Medium · 5.3 CVE-2024-11771 EUVD-2025-4984GHSA-4wjr-89vg-3hx6

Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality.

Published Feb 11, 2025 · Updated Feb 11, 2025 · Assigned by ivanti

Vendor: ivanti Product: Cloud Services Application Category: Network devices

Description

Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality.

Affected products

Vendor	Product	Affected	Fixed
Ivanti	Cloud Services Application	—	5.0.5

Advisories 1

WID-SEC-2025-0315 Ivanti Cloud Services Appliance: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 11, 2025

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-47908-CVE-2024-11771