Ivanti Issues Critical Security Updates for CSA and Connect Secure Vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-11634+1 related CVE | Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with… | 7.2 | 2% | ||
CVE-2024-11639+2 related CVEs | An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access | 9.8 group max | 5% | ||
| CVE-2024-8540 | Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application… | 5.5 | <1% |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Dec 11, 2024 Vulnerability / Network Security Ivanti has released security updates to address multiple critical flaws in its Cloud Services Application (CSA) and Connect Secure products that could lead to privilege escalation and code execution. CVE-2024-11639 (CVSS score: 10. 0) - An authentication bypass vulnerability in the admin web console of Ivanti CSA before 5.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.