Remote Code Execution Vulnerability in Ivanti EPM

CVE-2024-32842

Summary

A vulnerability exists in Ivanti Endpoint Manager that allows an authenticated remote attacker with administrative privileges to exploit SQL injection flaws. This exploitation can lead to the execution of arbitrary code, potentially allowing the attacker to compromise the affected system. Organizations using Ivanti Endpoint Manager versions prior to 2022 SU6 and the September 2024 update should prioritize applying the available patches to mitigate this risk effectively. For more information and mitigation strategies, refer to the official security advisory.

References