CVE-2024-11639

Name of the Vulnerable Software and Affected Versions: Ivanti CSA versions prior to 5.0.3

Description: The issue is related to an authentication bypass in the admin web console of Ivanti CSA, allowing a remote unauthenticated attacker to gain administrative access. There is no evidence of exploitation prior to disclosure.

Recommendations: For versions prior to 5.0.3, update to version 5.0.3 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin web console until a patch is applied.