Ivanti Security Updates – 14 August 2024

The addressed vulnerabilities could allow the remote attacker to perform denial of service attacks, obtain sensitive information, bypass security restrictions, or execute arbitrary code and gain access to the affected system.

Sample of the addressed vulnerabilities:

1. Ivanti Virtual Traffic Manager (vTM ) Security Bypass (CVE-2024-7593):

• CVSS: 9.8
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Bypass Security

2. Ivanti Neurons for ITSM Information Disclosure (CVE-2024-7569):

• CVSS: 9.6
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Obtain Information

Affected Products:

• Ivanti Avalanche.
• Ivanti Neurons for ITSM.
• Ivanti Virtual Traffic Manager (vTM).