CVE-2024-8963

The vulnerable software is Ivanti's Cloud Services Appliance (CSA), specifically versions before 4.6 Patch 519. This path traversal issue allows a remote unauthenticated attacker to access restricted functionality. The flaw is being actively exploited, and it is recommended to patch to version 4.6 Patch 519 or upgrade to version 5.0 to stay protected. An exploit for this issue is available, and a limited number of customers have been exploited by this vulnerability. The vulnerability can be exploited by unauthenticated attackers to bypass admin authentication and execute arbitrary commands.

Vulnerable versions: Ivanti Cloud Services Appliance (CSA) before 4.6 Patch 519.

#Ivanti #CloudServicesAppliance #PathTraversal #Cybersecurity #VulnerabilityAlert #PatchNow #InfoSec #CyberSecurityAwareness #DataBreach