PoC exploit for exploited Ivanti Cloud Services Appliance flaw released (CVE-2024-8190)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-8190 | OS Command Injection RCE in Ivanti Cloud Services Appliance 4.6 | 7.2 | 89% | KEV | KEV |
| CVE-2024-8963 | Unauthenticated Path Traversal in Ivanti Cloud Services Appliance | 9.1 | 99% | KEV | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | horizon3.ai | or other security tools on your CSA,” the company advised. Horizon3.ai has shared indicators of compromise that may be found in lo |
From the original article
2 min read at helpnetsecurity.com
CVE-2024-8190, an OS command injection vulnerability in Ivanti Cloud Services Appliance (CSA) v4. 6, is under active exploitation. Details about the attacks are still unknown, but there may be more in the near future: Horizon3.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.