CVE-2024-22060: Malicious File Upload
An unrestricted file upload vulnerability in web component of Ivanti Neurons for ITSM allows a remote, authenticated, high privileged user to write arbitrary files into sensitive directories of ITSM server.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22060?
CVE-2024-22060 is classified as a high severity vulnerability due to its potential to allow unauthorized file uploads to sensitive directories.
How do I fix CVE-2024-22060?
To fix CVE-2024-22060, apply the latest security patch provided by Ivanti for Neurons for ITSM as soon as it becomes available.
Who is affected by CVE-2024-22060?
CVE-2024-22060 affects the web component of Ivanti Neurons for ITSM, specifically those installations that allow authenticated users with high privileges.
What types of files can be uploaded in CVE-2024-22060?
CVE-2024-22060 allows attackers to upload arbitrary files, which can potentially include malicious scripts or executable files.
Is CVE-2024-22060 exploitable remotely?
Yes, CVE-2024-22060 can be exploited remotely by authenticated users with high privileges, making it a significant risk.