CVE-2024-9381

Summary

CVE-2024-9381 is a newly disclosed vulnerability affecting Ivanti's Configuration Manager (CSA) software. This issue permits a remote, authenticated attacker with admin privileges to bypass restrictions through a path traversal technique. The vulnerability could potentially enable unauthorized access to sensitive data or system functions, posing a significant risk to organizations using Ivanti CSA versions prior to 5.0.2. It is strongly recommended that affected organizations apply the available patches as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.