CVE-2024-38648 – Ivanti DSM Decryption Secret Disclosure

CVE ID : CVE-2024-38648

Published : July 12, 2025, 4:15 a.m. | 2 hours, 1 minute ago

Description : A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.

Severity: 9.0 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…