FlagThis

CyberSecurity updates
Updated: 2024-10-30 04:30:06 Pacfic
horizon3.ai
Ivanti CSA Vulnerability Actively Exploited: OS Command Injection Vulnerability Requires Urgent Action - 16d

Read more: www.horizon3.ai

A critical vulnerability (CVE-2024-8190) in Ivanti’s Cloud Services Appliance (CSA) has been actively exploited by malicious actors. This vulnerability allows attackers to gain unauthorized access and control of affected systems via OS command injection. The flaw specifically impacts older versions of CSA, including 4.6 (all versions before patch 519). The use of older versions of products can cause a lot of problems, as attackers can utilize old exploits against vulnerable products and systems. The urgency of this situation highlights the need for organizations to update their CSA software to the latest patched version or, if they have versions older than CSA 5.0, to consider adopting a newer product which has been properly secured. CISA advises that affected users immediately upgrade to CSA version 5.0, or a newer version.

References:
  • forums.ivanti.com - Ivanti's security advisory about the CVE-2024-8190 vulnerability - 16d
  • @BleepingComputer - The initial report on the active exploitation of the Ivanti CSA vulnerability. - 16d
  • www.bleepingcomputer.com - The report from Ivanti about the active exploitation of this vulnerability - 16d
  • securityaffairs.com - SecurityAffairs reports that the vulnerability is being exploited in the wild. - 15d
  • www.csoonline.com - Article mentioning the Ivanti CSA vulnerability under active exploitation. - 15d
  • www.cisa.gov - Ivanti Releases Security Update for Cloud Services Appliance - 15d
  • @youranonriots - This post warns of the vulnerability and highlights that the CSA 4.6 version is no longer supported, increasing risk to organizations. - 14d
  • thehackernews.com - The Hacker News article elaborates on the vulnerability and highlights that this exploit is being actively leveraged by threat actors. - 14d
  • securityaffairs.com - CISA adding Ivanti CSA Vulnerability to Known Exploited Vulnerabilities Catalog - 14d
  • gbhackers.com - GB Hackers reports on CISA's urgent advisory about the Ivanti CSA vulnerability. - 13d
  • malware.news - Malware News provides a brief update on ongoing attacks exploiting the Ivanti CSA vulnerability. - 13d
  • malware.news - Attacks leveraging Ivanti CSA vulnerability ongoing - 13d
  • www.scmagazine.com - Attacks leveraging Ivanti CSA vulnerability ongoing - 13d
  • nvd.nist.gov - CVE-2024-8190 details - 13d
  • therecord.media - Details on CISA urging agencies to remove Ivanti CSA - 12d
  • forums.ivanti.com - Ivanti's advisory on the admin bypass vulnerability. - 10d
  • securityonline.info - Explains the public release of a PoC exploit for the CVE-2024-8190 vulnerability impacting Ivanti CSA. - 10d
  • www.horizon3.ai - Horizon3.ai's analysis of CVE-2024-8190 exploit - 9d
  • socradar.io - SOCRadar reports on the active exploitation of CVE-2024-8963 in targeted attacks. - 9d

Classification:

This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts documented at my website here (https://royans.net/) if you have feedback. You can also find FlagThis at Mastodon.