CVE-2024-11771

Summary

CVE-2024-11771 is a newly disclosed vulnerability affecting Ivanti's Configuration Manager (CSA) prior to version 5.0.5. This issue permits an unauthenticated remote attacker to exploit a path traversal flaw, granting them access to restricted functionality within the system. The vulnerability could potentially be exploited to gain unauthorized access to sensitive data or execute malicious code, posing a significant risk to organizations using the affected version of Ivanti CSA. It is highly recommended that users upgrade to the latest version of the software to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.