Remote SQL Injection Vulnerability in Ivanti CSA Before Version 5.0.2
CVE-2024-9379

7.2HIGH

Key Information:

Vendor
Ivanti
Vendor
CVE Published:
8 October 2024

Badges

πŸ‘Ύ Exploit ExistsπŸ¦… CISA ReportedπŸ“° News Worthy

Summary

An SQL injection vulnerability exists in the admin web console of Ivanti's Cloud Services Appliance prior to version 5.0.2. This flaw allows a remote attacker with admin privileges to execute arbitrary SQL statements, posing significant security risks to the application and its underlying data. Immediate updates and security assessments are advised for users operating affected versions to mitigate potential intrusions and data breaches.

CISA Reported

CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace

The CISA's recommendation is: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.

Affected Version(s)

CSA (Cloud Services Appliance) 5.0.2

News Articles

CISA Added Fortinet & Ivanti vulnerabilities that Exploited in the Wild

CISA has recently updated its Known Exploited Vulnerabilities Catalog, adding critical vulnerabilities from Fortinet and Ivanti.

3 months ago

Ivanti zero-day vulnerabilities exploited in chained attack | TechT...

A limited number of Ivanti Cloud Service Application customers have been attacked in exploit chains containing zero-day vulnerabilities.

3 months ago

Three new Ivanti CSA zero-day actively exploited in attacks

Software company Ivanti released security patches for three new CSA zero-day vulnerabilities actively exploited in attacks.

3 months ago

References

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • πŸ¦…

    CISA Reported

  • πŸ‘Ύ

    Exploit known to exist

  • πŸ“°

    First article discovered by The Hacker News

  • Vulnerability published

  • Vulnerability Reserved

.