medium5.7
CVE-2024-38648
A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.
Impact
A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Desktop \& Server Management | before 2024.2 |