Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m7vj-mcjg-2mx3

Опубликовано: 08 июл. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 6.6

Описание

CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk.

CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk.

EPSS

Процентиль: 9%
0.00032
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-93

Связанные уязвимости

CVSS3: 6.6
nvd
7 месяцев назад

CLRF injection in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk.

EPSS

Процентиль: 9%
0.00032
Низкий

6.6 Medium

CVSS3

Дефекты

CWE-93