Ivanti Releases Admin Bypass Security Update for Cloud Services Appliance 19 Sep 2024

ronjor · Sep 19, 2024

Last Revised September 19, 2024

Ivanti has released a security update to address an admin bypass vulnerability (CVE-2024-8963) affecting Ivanti Cloud Services Appliance (CSA) version 4.6. A cyber threat actor could exploit this vulnerability in conjunction with CVE-2024-8190–detailed in a Sept. 13 Ivanti security advisory–to take control of an affected system. This vulnerability impacts all versions prior to patch 519.
Click to expand...

Ivanti has confirmed limited exploitation and recommends that users upgrade to CSA version 5.0, as version 4.6 is end-of-life and no longer supported. CISA urges users and administrators review the Ivanti security advisory and apply the necessary updates.
Click to expand...

Log in or Sign up

Ivanti Releases Admin Bypass Security Update for Cloud Services Appliance 19 Sep 2024

ronjor Global Moderator

Log in or Sign up

Ivanti Releases Admin Bypass Security Update for Cloud Services Appliance 19 Sep 2024

ronjor Global Moderator

Useful Searches