VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 12, 2024· Updated Nov 19, 2024

CVE-2024-50323

CVE-2024-50323

Description

SQL injection in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required.

Affected products

2
  • Ivanti/Endpoint Manager Mobilellm-fuzzy2 versions
    <2024 November Security Update for 2024 branch, <2022 SU6 November Security Update for 2022 branch+ 1 more
    • (no CPE)range: <2024 November Security Update for 2024 branch, <2022 SU6 November Security Update for 2022 branch
    • (no CPE)range: 2024 November Security Update

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.