Ivanti Releases Security Updates for Avalanche, Neurons for ITSM, and Virtual Traffic Manager

🗓️ 13 Aug 2024 12:00:00Reported by CISAType

cisa

cisa🔗 www.cisa.gov👁 20 Views

Ivanti updates fix vulnerabilities in Avalanche, Neurons for ITSM, and Virtual Traffic Manager.

Reporter	Title	Published	Views	Family All 104
GithubExploit	Exploit for Incorrect Implementation of Authentication Algorithm in Ivanti Virtual_Traffic_Management	24 Sep 202422:24	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Ivanti Endpoint_Manager	9 May 202403:10	–	githubexploit
GithubExploit	Exploit for Incorrect Implementation of Authentication Algorithm in Ivanti Virtual_Traffic_Management	12 Oct 202402:17	–	githubexploit
ATTACKERKB	CVE-2024-7593	13 Aug 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Ivanti Virtual Traffic Manager (vTM)’s traffic management and load balancing functionality lies in its flawed authentication algorithm implementation, which allows attackers to circumvent existing security restrictions.	21 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the OIDC protocol implementation in the IT service management tool Ivanti Neurons for ITSM allows a malicious actor to gain unauthorized access to protected information.	20 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the OIDC protocol implementation in the IT service management tool Ivanti Neurons for ITSM allows a attacker to execute a type of “man-in-the-middle” attack.	20 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SmartDeviceServer component in the Ivanti Avalanche mobile device management system allows a hacker to disclose protected information.	26 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WLAvalancheService method in the Ivanti Avalanche mobile device management system allows a hacker to trigger a service failure.	26 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-36136	14 Aug 202405:40	–	circl

Source	Link
help	www.help.ivanti.com/ps/help/en_US/VTM/22.x/userguide/ps-vtm-userguide/dedicated_management_net.htm
forums	www.forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-4-CVE-2024-38652-CVE-2024-38653-CVE-2024-36136-CVE-2024-37399-CVE-2024-37373
forums	www.forums.ivanti.com/s/article/Security-Advisory-Ivanti-Neurons-for-ITSM-CVE-2024-7569-CVE-2024-7570
forums	www.forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593

13 Aug 2024 12:00Current

10High risk

Vulners AI Score10

EPSS0.99987

ivanti avalanche security neurons for itsm virtual traffic manager cyber vulnerabilities network configuration.