Active Exploitation of Ivanti Virtual Traffic Manager Vulnerability

informationsecuritybuzz.com

Active Exploitation of Ivanti Virtual Traffic Manager Vulnerability - 4d

Read more: informationsecuritybuzz.com

CISA has issued an urgent advisory regarding an actively exploited security vulnerability impacting Ivanti Virtual Traffic Manager (vTM), a widely deployed application delivery controller. The vulnerability, tracked as CVE-2024-7593, allows for unauthenticated remote code execution (RCE) and has been assigned a CVSS score of 9.8, indicating a critical severity level. Attackers are leveraging this flaw to gain unauthorized access to systems and potentially compromise critical infrastructure. Organizations using vulnerable versions of Ivanti vTM are strongly advised to apply the necessary patches and follow CISA’s recommendations to mitigate the risk.

References:

www.cisa.gov - CISA's Known Exploited Vulnerabilities Catalog, where CVE-2024-7593 is listed, highlighting its critical risk to the federal enterprise. - 5d
securityaffairs.com - U.S. CISA adds Ivanti Virtual Traffic Manager flaw to its Known Exploited Vulnerabilities catalog - 4d
socradar.io - Critical vulnerabilities in Ivanti vTM and PostgreSQL’s pgAdmin tool have recently come under the spotlight, raising serious concerns for organizations relying on them. - 4d
www.cisa.gov - CISA has added one new vulnerability to its , based on evidence of active exploitation. - 4d

Classification:

HashTags: Cybersecurity Vulnerability RCE Ivanti
Company: Ivanti
Target: Organizations using Ivanti vTM
Product: Virtual Traffic Manager (vTM)
Feature: Authentication Bypass
Type: Vulnerability
Severity: Disaster

This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts documented at my website here (https://royans.net/) if you have feedback. You can also find FlagThis at Mastodon.