critical9.1
CVE-2024-47908
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote…
Impact
OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Cloud Services Appliance | before 5.0.5 |