CISA confirmed this vulnerability is used in real attacks on 24.09.2024. Remediation deadline for US federal agencies: 15.10.2024.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593 ; https://nvd.nist.gov/vuln/detail/CVE-2024-7593
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
| Vendor | Product | Versions | |
|---|---|---|---|
| ivanti | virtual_traffic_manager | 22.7r1 – < 22.7r2, 22.2 – < 22.2r1, 22.3 – < 22.3r3, 22.3r2 – < 22.3r3, 22.6r1 – < 22.6r2, 22.5r1 – < 22.5r2 | |
| Ivanti | vTM | fixed 22.7R2, fixed 22.2R1 |
cpe:2.3:a:ivanti:virtual_traffic_manager:22.2:*:*:*:*:*:*:*cpe:2.3:a:ivanti:virtual_traffic_manager:22.3:-:*:*:*:*:*:*cpe:2.3:a:ivanti:virtual_traffic_manager:22.3:r2:*:*:*:*:*:*cpe:2.3:a:ivanti:virtual_traffic_manager:22.5:r1:*:*:*:*:*:*cpe:2.3:a:ivanti:virtual_traffic_manager:22.6:r1:*:*:*:*:*:*cpe:2.3:a:ivanti:virtual_traffic_manager:22.7:r1:*:*:*:*:*:*Our free, open-source honeypot sensor waits on ports your server does not use and reports the scanners and attackers that connect to a shared blocklist.