CVE-2024-29826: SQL Injection
Published May 31, 2024
·Updated
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
Affected Software
7 affected components
Ivanti Endpoint Manager<2022
Ivanti Endpoint Manager=2022
Ivanti Endpoint Manager=2022-su1
Ivanti Endpoint Manager=2022-su2
Ivanti Endpoint Manager=2022-su3
Ivanti Endpoint Manager=2022-su4
Ivanti Endpoint Manager=2022-su5
Event History
May 31, 2024
CVE Published
via MITRE·05:38 PM
Data Sourced
via MITRE·05:38 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-29826?
CVE-2024-29826 has a high severity due to its ability to allow unauthenticated attackers to execute arbitrary code.
2
How do I fix CVE-2024-29826?
To fix CVE-2024-29826, upgrade the Ivanti Endpoint Manager to a version later than 2022 SU5.
3
Who is affected by CVE-2024-29826?
CVE-2024-29826 affects users of Ivanti Endpoint Manager 2022 and prior versions up to and including SU5.
4
What type of vulnerability is CVE-2024-29826?
CVE-2024-29826 is an SQL Injection vulnerability that allows for execution of arbitrary code.
5
Can an attacker exploit CVE-2024-29826 remotely?
No, an attacker must be within the same network to exploit CVE-2024-29826.