https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:44:17 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-187563 EUVD-2026-187563 https://cve.radiocsirt.org/vuln/euvd-2026-187563 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38344 <p>An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an authenticated attacker to read arbitrary files from a remote system, including the private key used to authenticate to agents for remote access.</p> <p>An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an authenticated attacker to read arbitrary files from a remote system, including the private key used to authenticate to agents for remote access.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-38344 https://cve.radiocsirt.org/vuln/ghsa-vhfm-hcpf-g55q <p>An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an authenticated attacker to read arbitrary files from a remote system, including the private key used to authenticate to agents for remote access.</p> <p>An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an authenticated attacker to read arbitrary files from a remote system, including the private key used to authenticate to agents for remote access.</p> https://cve.radiocsirt.org/vuln/ghsa-vhfm-hcpf-g55q https://cve.radiocsirt.org/vuln/gsd-2023-38344 gsd-2023-38344 https://cve.radiocsirt.org/vuln/gsd-2023-38344 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2421 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um Informationen offenzulegen oder einen Server Side Request Forgery-Angriff durchzuführen.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um Informationen offenzulegen oder einen Server Side Request Forgery-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2421