Exploitation of Critical Ivanti Virtual Traffic Manager Vulnerability CVE-2024-7593: Urgent Patching Required

informationsecuritybuzz.com

Exploitation of Critical Ivanti Virtual Traffic Manager Vulnerability CVE-2024-7593: Urgent Patching Required - 5d

Read more: informationsecuritybuzz.com

The Ivanti Virtual Traffic Manager (vTM), a software-based Application Delivery Controller (ADC), has been found to be vulnerable to a critical authentication bypass flaw, CVE-2024-7593. This vulnerability has been actively exploited by malicious actors and has been added to CISA’s Known Exploited Vulnerabilities (KEV) Catalog, making it an urgent priority for organizations to patch. The vulnerability allows attackers to bypass authentication on publicly exposed vTM admin panels, potentially creating unauthorized administrator accounts. This could grant attackers full control over the vTM system, leading to data breaches, system compromises, and disruption of services.

References:

forums.ivanti.com - Ivanti security advisory on CVE-2024-7593 - 5d
malware.news - Malware news on exploitation of Ivanti vTM vulnerability - 5d
www.cisa.gov - CISA alert on Ivanti vTM vulnerability - 5d

Classification:

HashTags: cybersecurity vulnerability Ivanti vTM
Company: Ivanti
Target: vTM admin panels
Product: Virtual Traffic Manager (vTM)
Feature: Authentication
Type: Vulnerability
Severity: Major

This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts documented at my website here (https://royans.net/) if you have feedback. You can also find FlagThis at Mastodon.