Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in
Get started About
User Guide
Log in Get started
Vulnerabilities CVE-2024-9380

CVE-2024-9380

Medium
Open
KEV
TLP:CLEAR

Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Ivanti — Cloud Services Appliance (CSA) — Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.

Details

EPSS Score ⓘ
62.79%

99.1th percentile

Confidence
100%
CISA KEV
Date Added
Oct 9, 2024
Patch Due
Oct 30, 2024
Required Action
As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
Notes
0
Log in to add a note
No notes yet. Click "Add Note" to create the first analysis note.
Opinions
0
Log in to add an opinion
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.