CVE-2024-8963: critical vulnerability in Ivanti CSA (Cloud Services Appliance)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA and has a working public exploit.
As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive security updates.
A path traversal flaw in Ivanti CSA before version 4.6 Patch 519 lets attackers bypass security to access restricted features without logging in. This is critical because attackers can gain unauthorized control over sensitive systems.
Path traversal vulnerability (CWE-22) in Ivanti CSA <4.6 Patch 519 allows unauthenticated remote attackers to manipulate file paths and access restricted functionality. The vulnerability requires no prior authentication and can lead to unauthorized system access and privilege escalation.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.