Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability (CVE-2024-9379)
Severity: high · Patch status: unpatched · Since 2024-10-09 · CVE-2024-9379
Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements. CISA added CVE-2024-9379 to its Known Exploited Vulnerabilities catalog on Oct 9, 2024, which means attackers are exploiting it in the wild.
What to do
- As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.
- US federal agencies must remediate by Oct 30, 2024 (BOD 22-01); treat that as the outer limit.
Sources
All live incidents on Threat Watch
