CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

On August 13, Ivanti released a security advisory to address a critical severity authentication bypass vulnerability in its Virtual Traffic Manager (vTM) product, a software-based application delivery controller (ADC).

The vulnerability tracked as CVE-2024-7593  is an authentication bypass vulnerability that, if exploited, could allow a remote attacker with no prior authentication to create an administrator user account. Ivanti noted in their advisory the availability of public exploit code but are not aware of customers being exploited prior to the disclosure of the vulnerability.

For more information about the vulnerability, including the availability of patches and Tenable product coverage, please visit our blog.