A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).

Ivanti EPM Cloud Services Appliance versions prior to 4.6.0-512 is affected by a vulnerability allowing an unauthenticated attacker to execute remote code via a specially forged request with limited permissions (nobody).

The version of Ivanti Endpoint Manager Cloud Services Appliance running on the remote host is prior to 4.6.0-512. It is, therefore, affected by an code injection vulnerability. An unauthenticated, remote user can execute arbitrary code with limited permissions (nobody).

Note that Nessus has not tested for these issues but has instead relied only on the service's self-reported version number.

ID	Name	Product	Family	Type	Severity
114383	Ivanti EPM Cloud Services Appliance < 4.6.0-512 Remote Code Execution	Web App Scanning	Component Vulnerability	Check Based	critical
194479	Ivanti Endpoint Manager - Cloud Service Appliance Code Injection (SA-2021-12-02)	Nessus	Windows	Remote	critical

Detections

Analytics

CVE-2021-44529

critical

Tenable Plugins

critical

critical