Description
Ivanti vTM 22.2R1版本、22.7R2版本存在安全漏洞，该漏洞源于身份验证算法存在错误。攻击者利用该漏洞可以绕过管理面板的身份验证。
Ivanti Virtual Traffic Manager 认证绕过漏洞(CVE-2024-7593)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-7593
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593
https://avd.aliyun.com/detail?id=AVD-2024-7593
https://www.hnitns.com/index.php?id=283
https://cve.imfht.com/detail/CVE-2024-7593
https://www.tenable.com/blog/cve-2024-7593-ivanti-virtual-traffic-manager-authentication-bypass-vulnerability
https://github.com/rxerium/CVE-2024-7593
https://cn-sec.com/archives/3112877.html
https://www.rapid7.com/db/modules/auxiliary/admin/http/ivanti_vtm_admin/