RULE(RULE ID:338963)

Rule General Information
Release Date: 2025-05-20
Rule Name: Ivanti Cloud Services Appliance Path Traversal Vulnerability (CVE-2024-8963)
Severity:
CVE ID:
Rule Protection Details
Description: Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963
Solutions
Please refer to announcements or patches release by the vendor: https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-4-6-Cloud-Services-Appliance-CVE-2024-8963