CVE-2024-9381
Ivanti
CVE-2024-9381 is a path traversal vulnerability found in Ivanti CSA (Connect Secure Appliance) before version 5.0.2. This flaw enables a remote, authenticated attacker with administrator privileges to circumvent security restrictions and potentially access unauthorized files and directories. The SVRS score of 66 indicates a significant risk, though not critical, demanding prompt attention and remediation.
This vulnerability could allow attackers to read sensitive configuration files or execute arbitrary code on the affected system, jeopardizing system integrity and data confidentiality. Successful exploitation could lead to complete system compromise if not addressed. Patches should be applied to mitigate the security risk. Organizations using the Ivanti CSA are urged to upgrade to version 5.0.2 or later to address this serious vulnerability.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.