CVE-2024-32840: 
Ivanti Endpoint Manager vulnerability analysis and mitigation

CVE-2024-32840 is a SQL injection vulnerability discovered in Ivanti Endpoint Manager (EPM) affecting versions before 2022 SU6 and the 2024 September update. The vulnerability was reported by HackerOne and disclosed in September 2024 (NVD, Hacker News).

The vulnerability is classified as a SQL injection flaw that affects authenticated users with admin privileges. It has received a CVSS v3.1 base score of 7.2 (HIGH) from NIST with a vector string of CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, while HackerOne assigned it a CVSS score of 9.1 (CRITICAL) with a vector string of CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H (NVD).

If successfully exploited, this vulnerability allows a remote authenticated attacker with admin privileges to achieve remote code execution on the affected system (NVD, Hacker News).

Ivanti has released patches to address this vulnerability. Users are advised to upgrade to EPM version 2024 SU1 or 2022 SU6, depending on their current version (Hacker News).

Ivanti has acknowledged that they have enhanced their internal scanning, manual exploitation, and testing capabilities, as well as improved their responsible disclosure process to more quickly identify and address potential security issues (Hacker News).