Remote SQL Injection Vulnerability in Ivanti CSA Before Version 5.0.2
Key Information
- Vendor
- Ivanti
- Status
- Csa (cloud Services Appliance)
- Vendor
- CVE Published:
- 8 October 2024
Badges
Summary
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
CISA Reported
CISA provides regional cyber and physical services to support security and resilience across the United States. CISA monitor the most dangerious vulnerabilities and have identifed CVE-2024-9379 as being exploited but is not known by the CISA to be used in ransomware campaigns. This is subject to change at pace
The CISA's recommendation is: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
Affected Version(s)
CSA (Cloud Services Appliance) <= 5.0.2
News Articles
GBHackers CVE-2024-23113CVE-2024-9379CISA Added Fortinet & Ivanti vulnerabilities that Exploited in the Wild
CISA has recently updated its Known Exploited Vulnerabilities Catalog, adding critical vulnerabilities from Fortinet and Ivanti.
1 month ago
Ivanti zero-day vulnerabilities exploited in chained attack | TechT...
A limited number of Ivanti Cloud Service Application customers have been attacked in exploit chains containing zero-day vulnerabilities.
1 month ago
Security Affairs CVE-2024-8963CVE-2024-9379Three new Ivanti CSA zero-day actively exploited in attacks
Software company Ivanti released security patches for three new CSA zero-day vulnerabilities actively exploited in attacks.
1 month ago
CVSS V3.1
Timeline
- 👾
Exploit exists.
First article discovered by The Hacker News
Vulnerability published.
Vulnerability Reserved.