Ivanti EPM vulnerable to SQL injection, allowing remote code execution

CVE-2024-34779

Summary

A previously undetected SQL injection vulnerability exists in Ivanti Endpoint Manager prior to 2022 SU6 and the September 2024 update. This flaw allows an authenticated attacker with administrative privileges to exploit the application, potentially leading to unauthorized remote code execution. Due to the nature of SQL injection vulnerabilities, an attacker could manipulate database queries, compromising the integrity and availability of the application and possibly affecting the broader network. Organizations should prioritize the application of security updates and patch management strategies to mitigate this risk.

References