CRITICAL✓ PATCH🇵🇱 Wersja polska

CVE-2024-7569

CVSS 9.6v3.1pub. 2024-08-13upd. 2024-09-06

An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated attacker to obtain the OIDC client secret via debug information.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

  • Ivanti Neurons For Itsm

    APP
    Ivanti
    2023.22023.32023.4
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2025-22462CRITICAL9.8PL ✓ten sam produkt

Authentication Bypass w Ivanti Neurons for ITSM — dostęp administracyjny bez uwierzytelnienia

CVE-2023-46808CRITICAL9.9PL ✓ten sam produkt

Ivanti Neurons for ITSM — podatność file upload umożliwiająca zapis plików na serwerze

CVE-2024-7570HIGH8.3ten sam produkt

Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows...

CVE-2024-22059HIGH8.8ten sam produkt

A SQL injection vulnerability in web component of Ivanti Neurons for ITSM allows a remote authenticated user t...

CVE-2024-22060MEDIUM4.9ten sam produkt

An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authent...