Ivanti Cloud Service Appliance Command Injection Vulnerability

[whereveryouare666]

Template for?

CVE-2024-8190 CISA KEV Ivanti Cloud Service Appliance Command Injection Vulnerability

Details:

PoC
https://www.horizon3.ai/attack-research/cisa-kev-cve-2024-8190-ivanti-csa-command-injection
https://github.com/horizon3ai/CVE-2024-8190

[GeorginaReeder]

Thanks so much for this @whereveryouare666 ! :)

[CodeStuffBreakThings]

Hi @whereveryouare666 - I created #11174 but I don't currently have a vulnerable instance of Ivanti Cloud Service Appliance to test with. Could you run this against a vulnerable instance and let me know if it works?
Thank you!

[CodeStuffBreakThings]

I opened a support case with Ivanti but they cannot provide me with a download for CSA 4.6 to test with since it's been deprecated