CVE-2021-44529

Summary

CVE-2021-44529 is a code injection vulnerability affecting Ivanti's EPM Cloud Services Appliance (CSA). Unlike authenticated attacks, this issue allows unauthenticated users to inject and execute arbitrary code with restricted permissions (nobody). This flaw poses a significant risk as it bypasses the standard authentication process, potentially enabling attackers to gain unauthorized access and manipulate the system. Ivanti has released a patch to address this vulnerability, and users are strongly advised to update their systems promptly to mitigate potential threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.