Ivanti fixes three CSA zero-days exploited in the wild (CVE-2024-9379, CVE-2024-9380, CVE-2024-9381)
60
CVE-2024-9381
—CVSS 3.1
7.2 high
EPSS
16%p97
Published
()
Modified
Description
Path traversal in Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to bypass restrictions.
- Vendors
- ivanti
- Products
- endpoint manager cloud services appliance
- Weakness
- CWE-22
- Vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
In the news8 stories
Ivanti fixed a maximum severity vulnerability in its CSA solution
60
U.S. CISA adds Fortinet products and Ivanti CSA bugs to its Known Exploited Vulnerabilities catalog
60
Week in review: Microsoft fixes two exploited zero-days, SOC teams are losing trust in security tools
60
Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited
60
U.S. CISA adds Ivanti CSA and Fortinet bugs to its Known Exploited Vulnerabilities catalog
60
Ivanti: Three CSA Zero
60
Three new Ivanti CSA zero
60