CVEvulnerability

CVE-2022-21828

7.2 HIGH Published 2022-03-04 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-03-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-502

Description

A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack vector in Incapptic Connect version 1.40.0, 1.39.1, 1.39.0, 1.38.1, 1.38.0, 1.37.1, 1.37.0, 1.36.0, 1.35.5, 1.35.4 and 1.35.3.

Affected configurations

• ivanti incapptic connect 1.35.3 • ivanti incapptic connect 1.35.4 • ivanti incapptic connect 1.35.5 • ivanti incapptic connect 1.36.0 • ivanti incapptic connect 1.37.0 • ivanti incapptic connect 1.37.1 • ivanti incapptic connect 1.38.0 • ivanti incapptic connect 1.38.1 • ivanti incapptic connect 1.39.0 • ivanti incapptic connect 1.39.1 • ivanti incapptic connect 1.40.0

Related

Weakness · CWE (1)

  • CWE-502 Deserialization of Untrusted Data weakness

References