Security Advisory

CVE-2024-38648

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-12 03:30:40
Last updated 2025-07-14 16:12:29
Assigner hackerone
CVSS score not scored
State PUBLISHED

Description

A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.