CVE-2024-7593

Produto

Ivanti / Virtual Traffic Manager

Vulnerabilidade

Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

Adicionado ao KEV

24 de set. de 2024

Corrigir até

15 de out. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated attacker to create a chosen administrator account.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593 ; https://nvd.nist.gov/vuln/detail/CVE-2024-7593