CVE-2024-29829: SQL Injection
Published May 31, 2024
·Updated
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an authenticated attacker within the same network to execute arbitrary code.
Affected Software
7 affected components
Ivanti Endpoint Manager<2022
Ivanti Endpoint Manager=2022
Ivanti Endpoint Manager=2022-su1
Ivanti Endpoint Manager=2022-su2
Ivanti Endpoint Manager=2022-su3
Ivanti Endpoint Manager=2022-su4
Ivanti Endpoint Manager=2022-su5
Event History
May 31, 2024
CVE Published
via MITRE·05:38 PM
Data Sourced
via MITRE·05:38 PM
DescriptionSeverity
Apr 1, 58713
Event
via NVD·11:50 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-29829?
CVE-2024-29829 has a high-severity rating due to its potential for an authenticated attacker to execute arbitrary code.
2
How do I fix CVE-2024-29829?
To remediate CVE-2024-29829, you should upgrade to a version of Ivanti Endpoint Manager released after 2022 SU5.
3
Who is affected by CVE-2024-29829?
CVE-2024-29829 affects users of Ivanti Endpoint Manager versions 2022, SU1, SU2, SU3, SU4, and SU5.
4
Can CVE-2024-29829 be exploited remotely?
CVE-2024-29829 is not exploitable remotely as it requires authentication and access within the same network.
5
What type of vulnerability is CVE-2024-29829?
CVE-2024-29829 is a SQL Injection vulnerability that allows for arbitrary code execution.