CVE-2024-9380: Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability
An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.
Other sources
Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti Cloud Services Appliance (CSA)to a version that resolves this vulnerability.Fixed in 5.0.2 - Remove
Remove
Ivanti CSA 4.6.xfrom your environment.Remove CSA 4.6.x from service (Ivanti CSA 4.6.x has reached End-of-Life).
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2024-9380?
CVE-2024-9380 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2024-9380?
To fix CVE-2024-9380, upgrade Ivanti Cloud Services Appliance to version 5.0.2 or later.
Who is affected by CVE-2024-9380?
CVE-2024-9380 affects Ivanti Cloud Services Appliance versions prior to 5.0.2.
What type of vulnerability is CVE-2024-9380?
CVE-2024-9380 is classified as an OS command injection vulnerability.
What can an attacker do with CVE-2024-9380?
An attacker exploiting CVE-2024-9380 can gain remote code execution with admin privileges.