OS command injection in Ivanti Sentry before versions 10.7.4, 10.8.3, and 11.0.0 as well as in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and…
OS command injection in Ivanti Sentry before versions 10.7.4, 10.8.3, and 11.0.0 as well as in Ivanti EPMM before version 12.10.0.1, 12.9.0.3, and 12.8.0.5 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Ivanti
- Product
- Sentry, Endpoint Manager Mobile
- CVSS v3.1
- 7.2 AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-78
- Exposure class
- Mobile OS
- NVD status
- Received
Why it ranks 36 (Notable)
- CVSS v3.1 7.2 high
- Product class: mobile OS
- Widely deployed vendor product (Ivanti)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.