Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2022-44569: A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.
CVE-2022-44569 · published 3 years ago
Summary
A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.
What to do
- Update ivanti automation to version 2023.4 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| ivanti | automation |
< 2023.4 cpe:2.3:a:ivanti:automation:*:*:*:*:*:*:*:* |
Original advisory text
A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.
A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.
References
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-287Improper Authentication
Timeline
Published3 Nov 2023
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2022-44569 · NVD
Track software like this
Free during beta