CVE-2024-11639CWE-288

An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access

Critical · published December 10, 2024

CVSS v3.1
10.0
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

🚨 An authentication bypass lets any remote attacker stroll right into the admin console of Ivanti CSA versions before 5.0.3! 🔥 Think of this as a security guard who left the main door wide open at a bank. Anyone can just waltz in, grab the keys to the vault, and access everything without breaking a sweat! If exploited, a malicious user could seize complete control of the admin interface, change settings, gain sensitive data, and completely compromise your system. This is absolutely devastating, as it puts all your users and data at risk!

Put simply

Think of this as a security guard who left the main door wide open at a bank. Anyone can just waltz in, grab the keys to the vault, and access everything without breaking a sweat! This vulnerability allows remote unauthenticated attackers to bypass the authentication mechanism of the admin web console. By exploiting this flaw, attackers can gain administrative access without any legitimate credentials.

What to do

If exploited, a malicious user could seize complete control of the admin interface, change settings, gain sensitive data, and completely compromise your system. This is absolutely devastating, as it puts all your users and data at risk! Immediate action is crucial! Upgrade Ivanti CSA to version 5.0.3 to patch this vulnerability. Review your security settings and consider implementing additional monitoring to detect any unauthorized access attempts. You've got this! Follow these steps and you'll secure your system in no time. 🛡️

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.04869 · 92.0th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2024-12-10T18:54Z
EPSS history
Timeline
  • 10 DEC 18:54Z
    An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access
    cvelistv5