Ivanti Releases Security Update for Cloud Services Appliance 13 Sep 2024

ronjor · Sep 13, 2024

Last Revised September 13, 2024

Ivanti has released a security update addressing an OS command injection vulnerability (CVE-2024-8190) affecting Ivanti Cloud Services Appliance (CSA) 4.6 (all versions before patch 519). A cyber threat actor could exploit this vulnerability to take control of an affected system. 
Click to expand...

At this time, Ivanti has confirmed limited exploitation and urges its customers using the affected versions to upgrade to CSA version 5.0. Ivanti no longer supports CSA 4.6 (end-of-life).
Click to expand...

CISA recommends users and administrators review CISA and FBI's joint guidance on eliminating OS command injections and the Ivanti security advisory
and apply the recommended updates.
Click to expand...

stapp · Oct 8, 2024

Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited

Ivanti has warned that three new security vulnerabilities impacting its Cloud Service Appliance (CSA) have come under active exploitation in the wild.
The zero-day flaws are being weaponized in conjunction with another flaw in CSA that the company patched last month, the Utah-based software services provider said.
Click to expand...

https://thehackernews.com/2024/10/zero-day-alert-three-critical-ivanti.html

Log in or Sign up

Ivanti Releases Security Update for Cloud Services Appliance 13 Sep 2024

ronjor Global Moderator

stapp Global Moderator

Log in or Sign up

Ivanti Releases Security Update for Cloud Services Appliance 13 Sep 2024

ronjor Global Moderator

stapp Global Moderator

Useful Searches