Description
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | CSA (Cloud Services Appliance) | — | 5.0.2 |
Advisories 2
- NCSC-2024-0399 Kwetsbaarheden verholpen in Ivanti Cloud Services Appliance NCSC-NL (Netherlands) · Oct 9, 2024
- WID-SEC-2024-3120 Ivanti Cloud Services Appliance: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 8, 2024