Actively exploited · Published Oct 8, 2024 · Assigned by ivanti
CVE-2024-9379
Medium 6.5 Exploited
In plain English
A medium-severity SQL injection in CSA (Cloud Services Appliance) from Ivanti. Attackers are actively exploiting it in the wild (listed by CISA on October 9, 2024). The chance it is exploited in the next 30 days is estimated at 44.3% (higher than 99% of all known vulnerabilities). As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
CISA guidance
As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
Federal agencies must remediate by Oct 30, 2024.
Official description
SQL injection in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | CSA (Cloud Services Appliance) | see references |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H