CVE-2024-47908

Name of the Vulnerable Software and Affected Versions Ivanti CSA versions prior to 5.0.5

Description The issue allows a remote authenticated attacker with admin privileges to achieve remote code execution through OS command injection in the admin web console.

Recommendations For Ivanti CSA versions prior to 5.0.5, update to version 5.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin web console to minimize the risk of exploitation.