CVE-2024-7569: Critical severity ivanti neurons for itsm vulnerability
Published Aug 13, 2024
·Updated
An information disclosure vulnerability in Ivanti ITSM on-prem and Neurons for ITSM versions 2023.4 and earlier allows an unauthenticated attacker to obtain the OIDC client secret via debug information.
Affected Software
3 affected components
Ivanti Neurons for ITSM=2023.2
Ivanti Neurons for ITSM=2023.3
Ivanti Neurons for ITSM=2023.4
Remediation
Event History
Aug 13, 2024
News Published
via BleepingComputer·03:27 PM
News Published
via BleepingComputer·03:28 PM
CVE Published
via MITRE·06:10 PM
Data Sourced
via MITRE·06:10 PM
DescriptionSeverityWeakness
Dec 6, 56679
Event
via FIRST·04:43 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-7569?
CVE-2024-7569 is considered a high severity information disclosure vulnerability.
2
How do I fix CVE-2024-7569?
To remediate CVE-2024-7569, update to the latest version of Ivanti Neurons for ITSM beyond version 2023.4.
3
Who is affected by CVE-2024-7569?
CVE-2024-7569 affects users of Ivanti Neurons for ITSM versions 2023.4 and earlier.
4
What type of vulnerability is CVE-2024-7569?
CVE-2024-7569 is an information disclosure vulnerability that allows unauthorized access to sensitive client secret information.
5
Can CVE-2024-7569 be exploited remotely?
Yes, CVE-2024-7569 can be exploited by unauthenticated attackers remotely.