by Kastro
Paper/Archive/CVE-2023-46808

CVE-2023-46808

Ivanti ITSM — An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server.

EPSS 2%CVSS 9.9
critical.is priorityof 100
46
CVSS 9.9 (CNA, NVD agree)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 80.8.808 × 2016.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An file upload vulnerability in Ivanti ITSM before 2023.4, allows an authenticated remote user to perform file writes to the server. Successful exploitation may lead to execution of commands in the context of non-root user.

Affected

ProductAffectedFixed inSource
ITSM2023.3 – 2023.3–CNA
neurons_for_itsm< 2023.42023.4CISA-ADP

Scores by source

hackerone (CNA)9.9CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refforums.ivanti.com/s/article/SA-CVE-2023-46808-Authenticated-Remote-File-Write-for-Ivanti-Neurons-for-ITSM