Ivanti - Authentication Bypass (CVE-2024-7593)
Description
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.
psychologyCrowdSec Analysis
CVE-2024-7593 is a critical vulnerability in Ivanti vTM that allows remote attackers to bypass authentication controls and access the admin panel without valid credentials due to flaws in the authentication algorithm.
CrowdSec has been tracking this vulnerability and its exploits since 20th of November 2024.
CrowdSec has not observed any significant exploitation activity targeting CVE-2024-7593 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attack patterns are expected to focus on endpoints related to the administration interface.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2024-08-13 |
| CISA KEV | 2024-09-24 |
| CISA Remediation Deadline | 2024-10-15 |
| Rule Released | 2024-11-20 |
| CrowdSec First Seen | 2025-01-05 |
Related Weaknesses
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.