A hardcoded secret in Ivanti DSM before 20242 allows an authenticated attacker on an adjacent

链接： https://github.com/advisories/GHSA-8vv2-mwjj-9vr6

CVSS 评分： 9.0

参考链接：

• https://nvd.nist.gov/vuln/detail/CVE-2024-38648

• https://forums.ivanti.com/s/article/SA-2024-07-12-CVE-2024-38648

• https://github.com/advisories/GHSA-8vv2-mwjj-9vr6

描述：

A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.