CVE-2024-39712

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Configurations

No configuration.

History

01 Dec 2024, 19:15

Type Values Removed Values Added
Summary (en) Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.7 allows a remote authenticated attacker with admin privileges to achieve remote code execution. (en) Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

23 Nov 2024, 21:15

Type Values Removed Values Added
Summary (en) Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution. (en) Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.7 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

13 Nov 2024, 16:35

Type Values Removed Values Added
Summary
  • (es) La inyección de argumentos en Ivanti Connect Secure anterior a la versión 22.7R2.1 y 9.1R18.7 y en Ivanti Policy Secure anterior a la versión 22.7R1.1 permite que un atacante remoto autenticado con privilegios de administrador logre la ejecución remota de código.
CWE CWE-88

13 Nov 2024, 02:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-11-13 02:15

Updated : 2024-12-01 19:15


NVD link : CVE-2024-39712

Mitre link : CVE-2024-39712

CVE.ORG link : CVE-2024-39712


JSON object : View

Products Affected

No product.

CWE
CWE-88

Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')