Critical Flaw in Ivanti Virtual Traffic Manager Could Allow Rogue Admin Access

🗓️ 14 Aug 2024 05:18:00Reported by The Hacker NewsType

Critical Flaw in Ivanti Virtual Traffic Manager - Authentication bypass flaw allows rogue admin access. Security updates rolled out for CVE-2024-7593 with a CVSS score of 9.8. Mitigation recommended for limiting admin access

Reporter	Title	Published	Views	Family All 104
GithubExploit	Exploit for Incorrect Implementation of Authentication Algorithm in Ivanti Virtual_Traffic_Management	24 Sep 202422:24	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Ivanti Endpoint_Manager	9 May 202403:10	–	githubexploit
GithubExploit	Exploit for Incorrect Implementation of Authentication Algorithm in Ivanti Virtual_Traffic_Management	12 Oct 202402:17	–	githubexploit
ATTACKERKB	CVE-2024-7593	13 Aug 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Ivanti Virtual Traffic Manager (vTM)’s traffic management and load balancing functionality lies in its flawed authentication algorithm implementation, which allows attackers to circumvent existing security restrictions.	21 Aug 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the OIDC protocol implementation in the IT service management tool Ivanti Neurons for ITSM allows a malicious actor to gain unauthorized access to protected information.	20 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the OIDC protocol implementation in the IT service management tool Ivanti Neurons for ITSM allows a attacker to execute a type of “man-in-the-middle” attack.	20 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the SmartDeviceServer component in the Ivanti Avalanche mobile device management system allows a hacker to disclose protected information.	26 Nov 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the WLAvalancheService method in the Ivanti Avalanche mobile device management system allows a hacker to trigger a service failure.	26 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-36136	14 Aug 202405:40	–	circl