HTTP: Ivanti Endpoint Manager VulCore.asmx GetDBVulnerabilities SQL Injection
This signature detects attempts to exploit a known vulnerability against Ivanti Endpoint Manager VulCore.asmx. A successful attack can lead to command injection and arbitrary code execution.
Extended Description
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
Affected Products
Ivanti endpoint_manager
Short Name
HTTP:SQL:INJ:IVANTI-EP-VUL-GTDB
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2024-29823 CVE-2024-29826 CVE-2024-29827 Endpoint GetDBVulnerabilities Injection Ivanti Manager SQL VulCore.asmx
Release Date
07/18/2024
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3751
False Positive
Unknown
Vendors
Ivanti