CVE-2024-32839

Summary

CVE-2024-32839 is a newly disclosed SQL injection vulnerability affecting Ivanti Endpoint Manager. This issue, which is not yet patched, allows a remote, authenticated attacker with administrative privileges to execute arbitrary code by injecting malicious SQL commands into the application. Successful exploitation of this vulnerability could result in unauthorized system access and potential data theft or modification. Ivanti Endpoint Manager users are strongly urged to install the November 2024 Security Update or 2022 SU6 November Security Update as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.