H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2024-9380

Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.

Vulnerability
TypeVulnerability
External ID—
First seen2024-10-09
Last seen2024-10-09

Confidence

—

Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.

Labels

exploitedkev

CISA KEV context

Vendor / productIvanti Cloud Services Appliance (CSA)
Added2024-10-09
Due date2024-10-30
9 recorded

Relationships

mitigates
from Remediate CVE-2024-9380
Mitigation
related-to
to Command Delimiters
Technique
related-to
to Command Injection
Technique
related-to
to Exploiting Multiple Input Interpretation Layers
Technique
related-to
to IMAP/SMTP Command Injection
Technique
related-to
to LDAP Injection
Technique
related-to
to Manipulating Web Input to File System Calls
Technique
related-to
to Manipulating Writeable Configuration Files
Technique
related-to
to Manipulating Writeable Terminal Devices
Technique
2 external

References

nvd
CVE-2024-9380
open
cwe
CWE-77
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance