Metraipolis › archive › dc_eeb1e698aedc

KEV CVE-2024-8190: Ivanti Cloud Services Appliance — Ivanti Cloud Services Appliance OS Command Injection Vulnerability

Source: CISA KEV
Original: https://nvd.nist.gov/vuln/detail/CVE-2024-8190
License (as archived): CC0-1.0
Archived: 2026-10-25T19:10:11.769Z
SHA-256 of the archived text: 3b825c6336ef295cf9320d9c2239bf885f0d46fe457a1d44ad7e5cb64f3836a5
Stable URL of this page: https://metraipolis.com/documento/dc_eeb1e698aedc

How to cite

KEV CVE-2024-8190: Ivanti Cloud Services Appliance — Ivanti Cloud Services Appliance OS Command Injection Vulnerability — CISA KEV, https://nvd.nist.gov/vuln/detail/CVE-2024-8190 (CC0-1.0); archived copy: https://metraipolis.com/documento/dc_eeb1e698aedc (Metraipolis archive dc_eeb1e698aedc, sha256 3b825c6336ef295cf9320d9c2239bf885f0d46fe457a1d44ad7e5cb64f3836a5)

BibTeX

@misc{dceeb1e698aedc,
  title = {KEV CVE-2024-8190: Ivanti Cloud Services Appliance — Ivanti Cloud Services Appliance OS Command Injection Vulnerability},
  howpublished = {CISA KEV},
  url = {https://nvd.nist.gov/vuln/detail/CVE-2024-8190},
  note = {License CC0-1.0; archived copy https://metraipolis.com/documento/dc_eeb1e698aedc; sha256 3b825c6336ef295cf9320d9c2239bf885f0d46fe457a1d44ad7e5cb64f3836a5},
  year = {2026}
}

Archived text

Reproduced under CC0-1.0. Attribution: CISA KEV, https://nvd.nist.gov/vuln/detail/CVE-2024-8190. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

CVE-2024-8190 è nel catalogo CISA delle vulnerabilità SFRUTTATE attivamente (Known Exploited Vulnerabilities), aggiunta il 2024-09-13.
Prodotto: Ivanti Cloud Services Appliance — Ivanti Cloud Services Appliance OS Command Injection Vulnerability
Descrizione: Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.
Azione richiesta (agenzie federali USA): As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive future security updates. Scadenza: 2024-10-04.
Uso noto in campagne ransomware: Unknown
Debolezze: CWE-78
Note e riferimenti: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Service-Appliance-CSA-CVE-2024-8190; https://nvd.nist.gov/vuln/detail/CVE-2024-8190

Fonte: catalogo CISA KEV (CC0 1.0), versione 2026.10.23, consultato il 2026-10-25: https://www.cisa.gov/known-exploited-vulnerabilities-catalog