A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack vector in Incapptic Connect version 1.40.0, 1.39.1, 1.39.0, 1.38.1, 1.38.0, 1.37.1, 1.37.0, 1.36.0, 1.35.5, 1.35.4 and 1.35.3.
References
| Link | Resource |
|---|---|
| https://forums.ivanti.com/s/article/SA-2022-02-23?language=en_US | Exploit Third Party Advisory |
| https://forums.ivanti.com/s/article/SA-2022-02-23?language=en_US | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://forums.ivanti.com/s/article/SA-2022-02-23?language=en_US - Exploit, Third Party Advisory |
21 Mar 2022, 16:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:ivanti:incapptic_connect:1.35.5:*:*:*:*:*:*:* cpe:2.3:a:ivanti:incapptic_connect:1.37.1:*:*:*:*:*:*:* cpe:2.3:a:ivanti:incapptic_connect:1.35.3:*:*:*:*:*:*:* cpe:2.3:a:ivanti:incapptic_connect:1.38.0:*:*:*:*:*:*:* cpe:2.3:a:ivanti:incapptic_connect:1.39.1:*:*:*:*:*:*:* cpe:2.3:a:ivanti:incapptic_connect:1.38.1:*:*:*:*:*:*:* cpe:2.3:a:ivanti:incapptic_connect:1.40.0:*:*:*:*:*:*:* cpe:2.3:a:ivanti:incapptic_connect:1.37.0:*:*:*:*:*:*:* cpe:2.3:a:ivanti:incapptic_connect:1.39.0:*:*:*:*:*:*:* cpe:2.3:a:ivanti:incapptic_connect:1.36.0:*:*:*:*:*:*:* cpe:2.3:a:ivanti:incapptic_connect:1.35.4:*:*:*:*:*:*:* |
|
| CWE | NVD-CWE-noinfo | |
| References | (MISC) https://forums.ivanti.com/s/article/SA-2022-02-23?language=en_US - Exploit, Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 6.5
v3 : 7.2 |
04 Mar 2022, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-03-04 17:15
Updated : 2024-11-21 06:45
NVD link : CVE-2022-21828
Mitre link : CVE-2022-21828
CVE.ORG link : CVE-2022-21828
JSON object : View
Products Affected
ivanti
- incapptic_connect
CWE