Description
Ivanti Cloud Services Appliance (CSA) contains a path traversal vulnerability that could allow a remote, unauthenticated attacker to access restricted functionality. If CVE-2024-8963 is used in conjunction with CVE-2024-8190, an attacker could bypass admin authentication and execute arbitrary commands on the appliance.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| CSA (Cloud Services Appliance) | Ivanti / CSA (Cloud Services Appliance) | 4.6 Patch 519 | unaffected |
| CSA (Cloud Services Appliance) | Ivanti / CSA (Cloud Services Appliance) | 5.0 | unaffected |
| endpoint_manager_cloud_services_appliance | ivanti / endpoint_manager_cloud_services_appliance | >= 0, < 4.6patch519 | affected |