Description
Ivanti CSA在版本4.6补丁519之前的路径遍历漏洞允许远程未经验证的攻击者访问受限功能。
Ivanti Cloud Services Appliance (CSA) 存在路径遍历漏洞 (CVE-2024-8963)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963
https://nvd.nist.gov/vuln/detail/CVE-2024-8963
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963
https://www.cve.org/CVERecord?id=CVE-2024-8963
https://www.broadcom.com/support/security-center/protection-bulletin/cve-2024-8963-path-traversal-vulnerability-in-ivanti-csa
https://www.acunetix.com/vulnerabilities/web/ivanti-csa-path-traversal-cve-2024-8963-cve-2024-8190/
https://www.ionix.io/threat-center/cve-2024-8963/
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8963.yaml
https://www.fortinet.com/blog/threat-research/burning-zero-days-suspected-nation-state-adversary-targets-ivanti-csa
https://thehackernews.com/2024/09/critical-ivanti-cloud-appliance.html