Description
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| endpoint_manager_cloud_services_appliance | ivanti / endpoint_manager_cloud_services_appliance | >= 0, <= 4.6_patch_512 | affected |
| Ivanti EPM | n/a / Ivanti EPM | 4.6.0-512 | affected |