Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 24/09/2024. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| virtual traffic manager | = 22.2= 22.3= 22.5= 22.6= 22.7 |
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free