CVE-2024-29827: SQL Injection
Published May 31, 2024
·Updated
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
Affected Software
7 affected components
Ivanti Endpoint Manager<2022
Ivanti Endpoint Manager=2022
Ivanti Endpoint Manager=2022-su1
Ivanti Endpoint Manager=2022-su2
Ivanti Endpoint Manager=2022-su3
Ivanti Endpoint Manager=2022-su4
Ivanti Endpoint Manager=2022-su5
Event History
May 31, 2024
CVE Published
via MITRE·05:38 PM
Data Sourced
via MITRE·05:38 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-29827?
CVE-2024-29827 is considered a high severity SQL Injection vulnerability that allows code execution by anunauthenticated attacker.
2
How do I fix CVE-2024-29827?
To fix CVE-2024-29827, upgrade to the latest version of Ivanti Endpoint Manager released after 2022 SU5.
3
What software is affected by CVE-2024-29827?
CVE-2024-29827 affects Ivanti Endpoint Manager versions 2022 SU5 and earlier.
4
Who can exploit CVE-2024-29827?
CVE-2024-29827 can be exploited by unauthenticated attackers who are on the same network as the affected software.
5
What consequences can result from CVE-2024-29827 exploitation?
Exploitation of CVE-2024-29827 can lead to arbitrary code execution on vulnerable systems.