Description
Ivanti Cloud Services Appliance（Ivanti CSA）是美国Ivanti公司的一种 Internet 应用程序。可通过 Internet 提供安全的通信和功能。 Ivanti Cloud Services Appliance 4.6 Patch 519之前版本存在安全漏洞，该漏洞源于存在路径遍历，允许远程未经身份验证的攻击者访问受限功能。
Ivanti Cloud Service Appliance 路径穿越漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963
https://x.threatbook.com/v5/article?threatInfoID=145339
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2024-126/
https://censys.com/advisory/cve-2024-8963/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8963.yaml
https://www.ionix.io/threat-center/cve-2024-8963/
https://www.tenable.com/plugins/was/114513
https://www.ivanti.com/blog/cloud-service-appliance-4-6-security-update
https://www.twcert.org.tw/tw/cp-169-8422-82e58-1.html
https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-022a
https://nvd.nist.gov/vuln/detail/cve-2024-8963
https://blog.billows.com.tw/?p=3373
https://digital.nhs.uk/cyber-alerts/2024/cc-4552
https://www.secrss.com/articles/70389
https://pentest-tools.com/vulnerabilities-exploits/ivanti-cloud-services-appliance-path-traversal_23815
https://community.fortinet.com/fortindrcloud-59/fortiguard-outbreak-alert-ivanti-cloud-services-appliance-zero-day-attack-203514
https://www.zero-day.cz/database/915/
https://www.acunetix.com/vulnerabilities/web/ivanti-csa-path-traversal-cve-2024-8963-cve-2024-8190/
https://community.censys.com/censys-rapid-response-37/censys-rapid-response-cve-2024-8963-ivanti-cloud-services-appliance-csa-path-traversal-182
https://www.caloes.ca.gov/wp-content/uploads/Homeland-Security/Documents/Cyber-Advisories/Cal-CSIC-Cyber-Advisory_Multiple-Ivanti-Cloud-Service-Application-Vulnerabities.pdf
https://www.channele2e.com/brief/another-ivanti-csa-vulnerability-leveraged-in-ongoing-attacks
https://www.yahoo.com/news/critical-ivanti-cloud-appliance-flaw-140000797.html
https://www.darkreading.com/cyberattacks-data-breaches/ivanti-cloud-service-appliance-attacked-vuln
https://www.linkedin.com/posts/cytellix_cybersecurity-ivantivulnerability-patchnow-activity-7244790271438192642-zSxh
https://advisories.checkpoint.com/defense/advisories/public/2024/cpai-2024-0962.html
https://www.fortiguard.com/encyclopedia/ips/56710