Junglewise Threat Intelligence

CVE-2024-9379: Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

CVE-2024-9379 · Severity: critical · CVSS 7.2 · Exploited in the wild · Published 2024-10-09

Technologies: Ivanti Cloud Services Appliance (CSA). Vendors: Ivanti.

Executive brief

Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console. A remote authenticated attacker with administrator privileges can exploit this to execute arbitrary SQL statements.

Affected products

  • Ivanti Cloud Services Appliance (CSA) before 5.0.2

Timeline

  • 2024-10-08: disclosed: Initial CVE receipt from Ivanti
  • 2024-10-09: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
  • 2024-10-09: advisory: Vendor advisory published by Ivanti
  • 2024-10-09: exploited: Reported as exploited in the wild

Related threats