9.8
CRITICAL
CVE-2024-7593
Ivanti vTM Authentication Bypass Vulnerability
Description

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.

INFO

Published Date :

Aug. 13, 2024, 7:15 p.m.

Last Modified :

Sept. 6, 2024, 10:13 p.m.

Source :

3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Remotely Exploitable :

Yes !

Impact Score :

5.9

Exploitability Score :

3.9
Public PoC/Exploit Available at Github

CVE-2024-7593 has a 11 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2024-7593 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Ivanti virtual_traffic_management
: Total Affected Vendor : 1 | Products : 1
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2024-7593.

URL Resource
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593 Mitigation Patch Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
admin772/POC

None

Updated: 1 week ago
0 stars 0 fork 0 watcher
Born at : Sept. 9, 2024, 1:28 a.m. This repo has been linked 128 different CVEs too.
Profile Photo
WhosGa/MyWiki

None

HTML

Updated: 1 week ago
0 stars 0 fork 0 watcher
Born at : Sept. 4, 2024, 9:24 a.m. This repo has been linked 128 different CVEs too.
Profile Photo
rxerium/CVE-2024-7593

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.

0day ivanti cyber-security nuclei

Updated: 2 weeks, 5 days ago
0 stars 0 fork 0 watcher
Born at : Aug. 28, 2024, 10:02 a.m. This repo has been linked 2 different CVEs too.
Profile Photo
codeb0ss/CVE-2024-7593-PoC

CVE-2024-7593 < Ivanti vTM [Authentication Bypass]

codeb0ss ivanti cve-2024-7593 cve-2024-7593-exp cve-2024-7593-poc ivantivtm

Python

Updated: 1 week, 4 days ago
2 stars 1 fork 1 watcher
Born at : Aug. 26, 2024, 11:03 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
apiverve/news.Python-API

News API is a simple tool for scraping news data. It returns the news title, description, and more.

Python

Updated: 3 weeks, 6 days ago
0 stars 0 fork 0 watcher
Born at : May 25, 2024, 9:36 a.m. This repo has been linked 1 different CVEs too.
Profile Photo
apiverve/news-API

News API is a simple tool for scraping news data. It returns the news title, description, and more.

JavaScript

Updated: 3 weeks, 6 days ago
0 stars 0 fork 0 watcher
Born at : May 13, 2024, 4:20 p.m. This repo has been linked 1 different CVEs too.
Profile Photo
wy876/wiki

漏洞文库 wiki.wy876.cn

HTML

Updated: 3 days, 12 hours ago
328 stars 61 fork 61 watcher
Born at : Dec. 31, 2023, 7:18 a.m. This repo has been linked 5 different CVEs too.
Profile Photo
wy876/POC

收集整理漏洞EXP/POC,大部分漏洞来源网络，目前收集整理了1000多个poc/exp，长期更新。

Updated: 1 week, 1 day ago
3420 stars 699 fork 699 watcher
Born at : Aug. 19, 2023, 12:08 p.m. This repo has been linked 125 different CVEs too.
Profile Photo
Ostorlab/KEV

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

cisa-kev vulnerability 0day cisa exploits

Updated: 1 week, 2 days ago
516 stars 32 fork 32 watcher
Born at : April 19, 2022, 8:58 a.m. This repo has been linked 1181 different CVEs too.
Profile Photo
nomi-sec/PoC-in-GitHub

📡 PoC auto collect from GitHub. ⚠️ Be careful Malware.

security cve exploit poc vulnerability

Updated: 1 week, 1 day ago
6375 stars 1107 fork 1107 watcher
Born at : Dec. 8, 2019, 1:03 p.m. This repo has been linked 904 different CVEs too.
Profile Photo
tanjiti/sec_profile

爬取secwiki和xuanwu.github.io/sec.today,分析安全信息站点、安全趋势、提取安全工作者账号(twitter,weixin,github等)

Python HTML

Updated: 1 week, 2 days ago
1137 stars 202 fork 202 watcher
Born at : Feb. 19, 2019, 10:24 a.m. This repo has been linked 11 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2024-7593 vulnerability anywhere in the article.

  • Cybersecurity News
Revival Hijack: A New PyPI Hijacking Technique Threatens Thousands of Packages

The JFrog security research team has uncovered a novel PyPI package hijacking method known as “Revival Hijack,” which has put over 22,000 packages at risk of exploitation. Unlike traditional typosquat ... Read more

Published Date: Sep 05, 2024 (1 week, 4 days ago)
CVE-2024-6386 CVE-2024-7593 CVE-2024-38193 CVE-2024-6915 CVE-2024-38856 CVE-2024-0646
  • europa.eu
Cyber Brief 24-09 - August 2024

Cyber Brief (August 2024)September 4, 2024 - Version: 1.0TLP:CLEARExecutive summaryWe analysed 249 open source reports for this Cyber Brief1.Relating to cyber policy and law enforcement, in Europe, th ... Read more

Published Date: Sep 04, 2024 (1 week, 5 days ago)
CVE-2024-40766 CVE-2024-7971 CVE-2024-5914 CVE-2024-28986 CVE-2024-7593 CVE-2024-41730 CVE-2024-38200 CVE-2024-22116 CVE-2023-31315 CVE-2024-1305 ...+3 more CVE
  • Cybersecurity News
CVE-2024-38811: Code Execution Vulnerability Discovered in VMware Fusion

A high-severity security vulnerability (CVE-2024-38811, CVSS 8.8) has been identified in VMware Fusion, a popular virtualization software for macOS. The vulnerability, discovered by Mykola Grymalyuk o ... Read more

Published Date: Sep 03, 2024 (1 week, 6 days ago)
CVE-2024-38811 CVE-2024-8073 CVE-2024-39809 CVE-2024-39792 CVE-2024-7593 CVE-2024-43044 CVE-2024-42222 CVE-2024-42062
  • Cybersecurity News
CVE-2024-7593 (CVSS 9.8): Critical Ivanti vTM Flaw Now Weaponized, PoC Exploit Available

A critical authentication bypass vulnerability, tracked as CVE-2024-7593 (CVSS 9.8), in Ivanti’s Virtual Traffic Manager (vTM), is now significantly easier to exploit thanks to the release of public p ... Read more

Published Date: Sep 03, 2024 (1 week, 6 days ago)
CVE-2024-8073 CVE-2024-39809 CVE-2024-39792 CVE-2024-7593 CVE-2024-43044 CVE-2024-42222 CVE-2024-42062 CVE-2023-38035
  • Cybersecurity News
WikiLoader Malware Evolves with SEO Poisoning, Targets GlobalProtect Users

A cloned GlobalProtect page that directs users to download spoofed GlobalProtect installers | Image: Unit 42Please enable JavaScriptIn a recent investigation, the Unit 42 Managed Threat Hunting (MTH) ... Read more

Published Date: Sep 02, 2024 (2 weeks ago)
CVE-2024-8073 CVE-2024-39809 CVE-2024-39792 CVE-2024-7593 CVE-2024-43044 CVE-2024-42222 CVE-2024-42062 CVE-2021-3064
  • TheCyberThrone
CISA adds Jenkins bug CVE-2024-23897 to its KEV Catalog

The U.S. CISA added a Jenkins Command Line Interface (CLI) Path Traversal vulnerability to its Known Exploited Vulnerabilities (KEV) catalog.Jenkins has addressed the vulnerability tracked as CVE-2024 ... Read more

Published Date: Aug 20, 2024 (3 weeks, 6 days ago)
CVE-2024-7971 CVE-2024-7593 CVE-2024-2024 CVE-2024-23897 CVE-2023-22527 CVE-2023-43770
  • TheCyberThrone
CISA adds Jenkins bug CVE-2024-23897 to its KEV Catalog

The U.S. CISA added a Jenkins Command Line Interface (CLI) Path Traversal vulnerability to its Known Exploited Vulnerabilities (KEV) catalog.Jenkins has addressed the vulnerability tracked as CVE-2024 ... Read more

Published Date: Aug 19, 2024 (3 weeks, 6 days ago)
CVE-2024-7971 CVE-2024-7593 CVE-2024-2024 CVE-2024-23897 CVE-2023-22527 CVE-2023-43770
  • TheCyberThrone
PoC for IvantiTM vulnerability CVE-2024-7593 released

To limit the exploitability of this vulnerability, Ivanti recommends limiting Admin Access to the Management Interface internal to the network through the private / corporate network.The researchers a ... Read more

Published Date: Aug 19, 2024 (4 weeks ago)
CVE-2024-7971 CVE-2024-7593 CVE-2024-23897 CVE-2023-22527 CVE-2023-35082
  • Cyber Security News
Ivanti Virtual Traffic Manager Flaw Let Hackers Create Rogue Admin Accounts

Ivanti Virtual Traffic Manager has been discovered with a critical vulnerability which was associated with authentication bypass. This vulnerability has been assigned with CVE-2024-7593 and the severi ... Read more

Published Date: Aug 14, 2024 (1 month ago)
CVE-2024-7593
  • The Hacker News
Critical Flaw in Ivanti Virtual Traffic Manager Could Allow Rogue Admin Access

Vulnerability / Network Security Ivanti has rolled out security updates for a critical flaw in Virtual Traffic Manager (vTM) that could be exploited to achieve an authentication bypass and create rogu ... Read more

Published Date: Aug 14, 2024 (1 month ago)
CVE-2024-38653 CVE-2024-38652 CVE-2024-37399 CVE-2024-37373 CVE-2024-36136 CVE-2024-7593 CVE-2024-7570 CVE-2024-7569
  • BleepingComputer
Ivanti warns of critical vTM auth bypass with public exploit

​Today, Ivanti urged customers to patch a critical authentication bypass vulnerability impacting Virtual Traffic Manager (vTM) appliances that can let attackers create rogue administrator accounts. Iv ... Read more

Published Date: Aug 13, 2024 (1 month ago)
CVE-2024-7593 CVE-2024-7570 CVE-2024-7569 CVE-2024-22024 CVE-2024-21893 CVE-2024-21887 CVE-2023-46805
  • Cybersecurity News
CVE-2024-7593 (CVSS 9.8): Authentication Bypass in Ivanti vTM: Proof of Concept Available

Ivanti has issued a security advisory addressing a critical vulnerability (CVE-2024-7593) in its Virtual Traffic Manager (vTM), a software-based Layer 7 application delivery controller (ADC). The flaw ... Read more

Published Date: Aug 13, 2024 (1 month ago)
CVE-2024-7593 CVE-2024-36268 CVE-2024-6457 CVE-2024-39891 CVE-2024-1200 CVE-2012-4792
  • security.nl
Ivanti verhelpt kritieke kwetsbaarheden in Neurons en Virtual Traffic Manager

Softwarebedrijf Ivanti heeft vandaag beveiligingsupdates uitgebracht voor kritieke kwetsbaarheden in Ivanti Neurons for IT Service Management (ITSM) en Ivanti Virtual Traffic Manager en on-premise kla ... Read more

Published Date: Aug 13, 2024 (1 month ago)
CVE-2024-7593 CVE-2024-7570 CVE-2024-7569

The following table lists the changes that have been made to the CVE-2024-7593 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • Initial Analysis by [email protected]

    Sep. 06, 2024

    Action Type Old Value New Value
    Added CVSS V3.1 NIST AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593 No Types Assigned https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593 Mitigation, Patch, Vendor Advisory
    Added CWE NIST CWE-287
    Added CPE Configuration OR *cpe:2.3:a:ivanti:virtual_traffic_management:22.2:*:*:*:*:*:*:* *cpe:2.3:a:ivanti:virtual_traffic_management:22.3:-:*:*:*:*:*:* *cpe:2.3:a:ivanti:virtual_traffic_management:22.3:r2:*:*:*:*:*:* *cpe:2.3:a:ivanti:virtual_traffic_management:22.5:r1:*:*:*:*:*:* *cpe:2.3:a:ivanti:virtual_traffic_management:22.6:r1:*:*:*:*:*:* *cpe:2.3:a:ivanti:virtual_traffic_management:22.7:r1:*:*:*:*:*:*
  • CVE Received by 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

    Aug. 13, 2024

    Action Type Old Value New Value
    Added Description Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.
    Added Reference ivanti https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593 [No types assigned]
    Added CWE ivanti CWE-287
    Added CWE ivanti CWE-303
    Added CVSS V3.1 ivanti AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: