Description
An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated attacker to obtain the OIDC client secret via debug information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | ITSM | 2023.4 | 2023.4.0 |
Advisories 1
- NCSC-2024-0341 Kwetsbaarheden verholpen in Ivanti Neurons for ITSM NCSC-NL (Netherlands) · Aug 14, 2024