CVE-2024-7593

🗓️ 13 Aug 2024 18:17:47Reported by ivantiType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 120 Views🌐 WEB

Incorrect authentication implementation in Ivanti vT

Reporter	Title	Published	Views	Family All 28
GithubExploit	Exploit for Incorrect Implementation of Authentication Algorithm in Ivanti Virtual_Traffic_Management	24 Sep 202422:24	–	githubexploit
GithubExploit	Exploit for Incorrect Implementation of Authentication Algorithm in Ivanti Virtual_Traffic_Management	12 Oct 202402:17	–	githubexploit
ATTACKERKB	CVE-2024-7593	13 Aug 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Ivanti Virtual Traffic Manager (vTM)’s traffic management and load balancing functionality lies in its flawed authentication algorithm implementation, which allows attackers to circumvent existing security restrictions.	21 Aug 202400:00	–	bdu_fstec
Circl	CVE-2024-7593	13 Aug 202419:39	–	circl
CISA KEV Catalog	Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability	24 Sep 202400:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	24 Sep 202412:00	–	cisa
CNNVD	Ivanti Virtual Traffic Manager 安全漏洞	13 Aug 202400:00	–	cnnvd
Cvelist	CVE-2024-7593	13 Aug 202418:17	–	cvelist
Ivanti	Security Advisory: Ivanti Virtual Traffic Manager (vTM ) (CVE-2024-7593)	12 Aug 202418:40	–	ivanti

NVD

Vulners

Vulnrichment

Node

ivanti virtual_traffic_managerMatch22.2

ivanti virtual_traffic_managerMatch22.3-

ivanti virtual_traffic_managerMatch22.3r2

ivanti virtual_traffic_managerMatch22.5r1

ivanti virtual_traffic_managerMatch22.6r1

ivanti virtual_traffic_managerMatch22.7r1

[
  {
    "defaultStatus": "affected",
    "product": "vTM",
    "vendor": "Ivanti",
    "versions": [
      {
        "status": "unaffected",
        "version": "22.7R2",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "22.2R1",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
forums	www.forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

Parameter	Position	Path	Description	CWE
_form_submitted	request body	apps/zxtm/wizard.fcgi?error=1&section=Access+Management%3ALocalUsers	Endpoint used to create a new admin user during the authentication bypass flow.	CWE-287, CWE-303
create_user	request body	apps/zxtm/wizard.fcgi?error=1&section=Access+Management%3ALocalUsers	Endpoint used to create a new admin user during the authentication bypass flow.	CWE-287, CWE-303
group	request body	apps/zxtm/wizard.fcgi?error=1&section=Access+Management%3ALocalUsers	Endpoint used to create a new admin user during the authentication bypass flow.	CWE-287, CWE-303
newusername	request body	apps/zxtm/wizard.fcgi?error=1&section=Access+Management%3ALocalUsers	Endpoint used to create a new admin user during the authentication bypass flow.	CWE-287, CWE-303
password1	request body	apps/zxtm/wizard.fcgi?error=1&section=Access+Management%3ALocalUsers	Endpoint used to create a new admin user during the authentication bypass flow.	CWE-287, CWE-303
password2	request body	apps/zxtm/wizard.fcgi?error=1&section=Access+Management%3ALocalUsers	Endpoint used to create a new admin user during the authentication bypass flow.	CWE-287, CWE-303
_form_submitted	request body	apps/zxtm/login.cgi	Login endpoint used to validate the newly created admin user after bypass.	CWE-287, CWE-303
form_username	request body	apps/zxtm/login.cgi	Login endpoint used to validate the newly created admin user after bypass.	CWE-287, CWE-303
form_password	request body	apps/zxtm/login.cgi	Login endpoint used to validate the newly created admin user after bypass.	CWE-287, CWE-303
form_submit	request body	apps/zxtm/login.cgi	Login endpoint used to validate the newly created admin user after bypass.	CWE-287, CWE-303

17 Jun 2026 08:20Current

7.4High risk

Vulners AI Score7.4

CVSS 3.19.8

EPSS0.99987

SSVC

ivanti vtm authentication bypass cve-2024-7593 remote attacker