Ivanti Cloud Services Appliance (CSA) Command Injection
Posted by deepcore on January 19, 2023 – 12:33 am
This Metasploit module exploits a command injection vulnerability in the Ivanti Cloud Services Appliance (CSA) for Ivanti Endpoint Manager. A cookie based code injection vulnerability in the Cloud Services Appliance before 4.6.0-512 allows an unauthenticated user to execute arbitrary code with limited permissions. Successful exploitation results in command execution as the nobody user.
Post a reply
You must be logged in to post a comment.