CVE-2024-8190: Ivanti Cloud Services Appliance OS Command Injection Vulnerability
An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.
Other sources
Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti Cloud Services Applianceto a version that resolves this vulnerability.Fixed in 5.0.x - Remove
Remove
Ivanti Cloud Services Appliance 4.6.xfrom your environment.Remove CSA 4.6.x from service (Ivanti has urged users to remove CSA 4.6.x as it has reached End-of-Life).
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-8190?
CVE-2024-8190 is classified as a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-8190?
To fix CVE-2024-8190, update the Ivanti Cloud Services Appliance to version 4.6 Patch 519 or later.
Who can exploit the CVE-2024-8190 vulnerability?
Only remote authenticated attackers with admin level privileges can exploit the CVE-2024-8190 vulnerability.
What impact does CVE-2024-8190 have on affected systems?
CVE-2024-8190 allows attackers to execute arbitrary commands on the affected systems, leading to potential system compromise.
What versions of Ivanti Cloud Services Appliance are affected by CVE-2024-8190?
Ivanti Cloud Services Appliance versions 4.6 Patch 518 and earlier are affected by CVE-2024-8190.