Ivanti fixes three CSA zero-days exploited in the wild (CVE-2024-9379, CVE-2024-9380, CVE-2024-9381)
60
CVE-2024-9381
- CVSS 3.1
- 7.2 high
- EPSS
- 16%p97
- Published
- ·
- Modified
Description · NVD
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.
- Vendors
- ivanti
- Products
- endpoint manager cloud services appliance
- Weakness
- CWE-22
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
In the news
8 stories60
U.S. CISA adds Fortinet products and Ivanti CSA bugs to its Known Exploited Vulnerabilities catalog
60
Week in review: Microsoft fixes two exploited zero-days, SOC teams are losing trust in security tools
60
60
U.S. CISA adds Ivanti CSA and Fortinet bugs to its Known Exploited Vulnerabilities catalog
60
60
60