← Database

CVE-2024-38648

MEDIUM CVSS: 5.7 Published: 2025-07-12 Modified: 2026-06-17

Description

A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.

Affected Platforms

Ivanti Desktop \& Server Management

Weakness Type

CWE-798

References