Description
Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a token that would allow access to ITSM as any user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | ITSM | 2023.4 | 2023.4.0 |
Advisories 1
- NCSC-2024-0341 Kwetsbaarheden verholpen in Ivanti Neurons for ITSM NCSC-NL (Netherlands) · Aug 14, 2024