Security Advisory

CVE-2024-47908

9.1
CRITICAL

Vulnerability Description

OS command injection in the admin web console of Ivanti CSA before version 5.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Published Date February 11, 2025
Official Source NIST NVD Advisory