CVE-2024-11773

CVSS V2 None CVSS V3 None
Description
SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
Overview
  • CVE ID
  • CVE-2024-11773
  • Assigner
  • ivanti
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-12-10T18:56:08.742Z
  • Last Modified Date
  • 2024-12-10T20:03:44.694Z
Weakness Enumerations
CWE URL
CWE-89 http://cwe.mitre.org/data/definitions/89.html
References
Reference URL Reference Tags
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-11639-CVE-2024-11772-CVE-2024-11773
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-11773
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11773
History
Created Old Value New Value Data Type Notes
2024-12-11 13:25:45 Added to TrackCVE