Remote SQL Injection Vulnerability in Ivanti CSA Before Version 5.0.2
CVE-2024-9379
Key Information
- Vendor
- Ivanti
- Status
- Csa (cloud Services Appliance)
- Vendor
- CVE Published:
- 8 October 2024
Badges
Summary
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
CISA Reported
CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2024-9379 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace
The CISA's recommendation is: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
Affected Version(s)
CSA (Cloud Services Appliance) <= 5.0.2
News Articles
GBHackersCISA Added Fortinet & Ivanti vulnerabilities that Exploited in the Wild
CISA has recently updated its Known Exploited Vulnerabilities Catalog, adding critical vulnerabilities from Fortinet and Ivanti.
2 months ago
Ivanti zero-day vulnerabilities exploited in chained attack | TechT...
A limited number of Ivanti Cloud Service Application customers have been attacked in exploit chains containing zero-day vulnerabilities.
2 months ago
Security AffairsThree new Ivanti CSA zero-day actively exploited in attacks
Software company Ivanti released security patches for three new CSA zero-day vulnerabilities actively exploited in attacks.
2 months ago
Refferences
CVSS V3.1
Timeline
CISA Reported
- 👾
Exploit known to exist
First article discovered by The Hacker News
Vulnerability published
Vulnerability Reserved