Ivanti CSA: path traversal (CVE-2024-9381) #shorts #breaking

CVE

This CVE relates to a path traversal vulnerability found in the Ivanti Cloud Services Appliance. Versions affected are up to 5.0.1. This is considered a zero-day vulnerability, meaning it was potentially exploited before a fix was available. The threat allows a remote attacker, who is authenticated and has administrative rights, to bypass security restrictions. Consequently, it enables the execution of arbitrary code. Known targets of this security issue have been users of the Ivanti CSA. Due to its serious nature, individuals who use these versions should be aware that the vulnerability exists and affects the security integrity of their systems.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-CVE-2024-9381