CVE-2024-11771

Published Feb 11, 2025

Last updated 17 days ago

CVSS medium 5.3

Overview

Description
Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality.
Source
3c1d8aa1-5a33-4ea4-8992-aadd6440af75
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
5.3
Impact score
1.4
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Severity
MEDIUM

Weaknesses

3c1d8aa1-5a33-4ea4-8992-aadd6440af75
CWE-22

Social media

Hype score
Not currently trending

  1. #Ivanti: is on a roll today! On top of ICS/IPS/ISAC Critical vulnerabilities the patches released today cover Critical Ivanti CSA Vulnerability CVE-2024-47908 (#RCE) and CVE-2024-11771 (Path Traversal) 👇 https://t.co/YD1oevm1e4 https://t.co/4hDP6px8Oh

    @securestep9

    11 Feb 2025

    60 Impressions

    1 Retweet

    0 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

  2. 🚨 CVE-2024-11771 🟠 MEDIUM (5.3) 🏢 Ivanti - Cloud Services Application 🏗️ 5.0.5 🔗 https://t.co/cr7B2ckGAT #CyberCron #VulnAlert https://t.co/LVzzJWqE9U

    @cybercronai

    11 Feb 2025

    20 Impressions

    0 Retweets

    1 Like

    0 Bookmarks

    0 Replies

    0 Quotes

References