Skip to content
OpenAdvisories
High · 8.7 CVE-2024-22060 EUVD-2024-19658GHSA-7953-6pvf-6rgx

An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user …

Published May 31, 2024 · Updated Aug 25, 2024 · Assigned by hackerone

Description

An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user to write arbitrary files into sensitive directories of ITSM server.

Affected products

VendorProductAffectedFixed
Ivanti ITSM 2023.3 – ≤ 2023.3 —

References