CVE-2024-7570

Improper certificate validation in Ivanti ITSM on-prem and Neurons for ITSM Versions 2023.4 and earlier allows a remote attacker in a MITM position to craft a token that would allow access to ITSM as any user.

Score

CVSS 3.1 8.3 High

Status

Analyzed - 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Published

2024-08-13

Last modified

2024-08-16

Weaknesses

CWE-295

Affected products

• Itsm (Ivanti)
• Neurons For Itsm (Ivanti)

References

• https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2024-7569-CVE-2024-7570