CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass
Remote unauthenticated attackers can bypass admin panel authentication due to incorrect algorithm implementation in Ivanti vTM.
- Exploited in the wild
- Since 24 Sep 2024
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-7593?
CVE-2024-7593 is a critical authentication bypass vulnerability in Ivanti vTM, published on 13 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.
Which versions are affected by CVE-2024-7593?
It affects 1 product.
Products include Ivanti Virtual Traffic Manager.
How do I fix CVE-2024-7593?
No fix has been published for CVE-2024-7593 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 15 Oct 2024.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2024-7593 being exploited?
Yes. Attackers have exploited CVE-2024-7593 in the wild since at least 24 Sep 2024.
Public exploit code: 1 Metasploit module, 1 Nuclei template and 3 proofs of concept on GitHub.
Other vulnerabilities in Ivanti vTM
Sources
Also known as GHSA-8j5m-w2v7-mx38.