description: A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).
problem types: Code Injection (CWE-94)
affected:
{
vendor: n/a
product: Ivanti EPM
versions:
version: 4.6.0-512, status: affected
}