CVE-2024-7593_PoC_Exploit

CVE-2024-7593 漏洞利用脚本 此 Bash 脚本是用于利用 Ivanti vTM 身份验证绕过漏洞 CVE-2024-7593 的概念验证 PoC。它允许用户在目标系统上创建新的管理员帐户。 目录 先决条件 用法 参数 示例 作者 许可 先决条件 确保你的系统已安装以下工具： curl：此脚本使用 curl 发送 HTTP 请求。 你可以通过运行以下命令检查 curl 是否已安装： command -v curl 如果未安装，你可以使用包管理器进行安装。例如，在 Ubuntu 上： sudo apt-get install curl 用法...

CVE-2024-7593

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel...

CISA Flags Critical Ivanti vTM Vulnerability Amid Active Exploitation Concerns

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a critical security flaw impacting Ivanti Virtual Traffic Manager vTM to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability in question is CVE-2024-7593 CVSS...

CVE-2024-7593

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel...

CVE-2024-7593

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel...

CVE-2024-7593

Ivanti Virtual Traffic Manager (vTM) is affected by CVE-2024-7593: an authentication bypass in the management interface that lets a remote, unauthenticated attacker bypass admin login. Affected versions include 22.2R1 and 22.7R2 being excluded from the bypass fix; exploitation is demonstrated in ...

CVE-2024-7593

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel...

CVE-2024-7593

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

CVE-2024-7593: Improper Authentication

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel...

Ivanti Virtual Traffic Manager (vTM) 22.2 < 22.2R1 / 22.3 < 22.3R3 / 22.5 < 22.5R2 / 22.6 < 22.6R2 / 22.7 < 22.7R2 Authentication Bypass (CVE-2024-7593)

The version of Ivanti Virtual Traffic Manager vTM running on the remote host is 22.2 prior to 22.2R1, 22.3 prior to 22.3R3, 22.5 prior to 22.5R2, 22.6 prior to 22.6R2, or 22.7 prior to 22.7R2. It is, therefore, affected by an authentication bypass vulnerability: - Incorrect implementation of an...

PT-2024-5659

Name of the Vulnerable Software and Affected Versions Ivanti vTM versions prior to 22.2R1 and 22.7R2 Description A critical vulnerability in Ivanti Virtual Traffic Manager vTM allows remote unauthenticated attackers to bypass authentication and gain full administrative control of vulnerable vTM...