Ivanti.Cloud.Service.Appliance.client.index.Path.Traversal

Description

This indicates an attack attempt to exploit a Path Traversal Vulnerability in Ivanti Cloud Service Appliance.
The vulnerability is due to insufficient validation of user-supplied inputs. A remote unauthenticated attacker can exploit this vulnerability by sending maliciously crafted requests to a vulnerable application. Successful exploitation could result in information disclosure and access to restricted functionality of the application.

Outbreak Alert

Threat actors chained and exploited multiple zero-day vulnerabilities affecting Ivanti CSA (Cloud Services Appliance). If successful, this could lead an attacker to gain admin access, obtain credentials, bypass security measures, run arbitrary SQL commands, and execute code remotely.

View the full Outbreak Alert Report

Affected Products

Ivanti Cloud Service Appliance before 4.6 Patch 519

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963?language=en_US