CVE-2023-28129

UNRATEDJSON export Create alert

Description

DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user.

Affected products

Ivanti / Desktop & Server Management (DSM)2022 su2 – 2022 su2

References

MISChttps://forums.ivanti.com/s/article/SA-2023-07-26-CVE-2023-28129