Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in
Get started About
User Guide
Log in Get started
Vulnerabilities CVE-2024-8190

CVE-2024-8190

Medium
Open
KEV
TLP:CLEAR

Ivanti Cloud Services Appliance OS Command Injection Vulnerability

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

Ivanti — Cloud Services Appliance — Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.

Details

EPSS Score ⓘ
89.12%

99.8th percentile

Confidence
100%
CISA KEV
Date Added
Sep 13, 2024
Patch Due
Oct 4, 2024
Required Action
As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive future security updates.
Notes
0
Log in to add a note
No notes yet. Click "Add Note" to create the first analysis note.
Opinions
0
Log in to add an opinion
No opinions yet. Be the first to assess this intelligence.
Leaving Threaticon

This link opens an external site that isn't part of the platform.