Unrestricted File Upload Vulnerability in Ivanti Neurons for ITSM Allows Remote Attackers to Write Arbitrary Files

CVE-2024-22060

What is CVE-2024-22060?

An unrestricted file upload vulnerability exists within the web component of Ivanti Neurons for ITSM, enabling a remote, authenticated user with high privileges to upload arbitrary files. This vulnerability permits the writing of files into sensitive directories on the ITSM server, potentially leading to unauthorized access or manipulation of system files. Organizations using affected versions of Ivanti Neurons for ITSM should apply necessary patches and security measures to mitigate risks associated with this vulnerability. For detailed information and updates, refer to the security advisory.

References