PT-2025-6241 · Ivanti · Ivanti Csa

Published 2025-02-11 · Updated 2025-07-14 · CVE-2024-47908

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti CSA versions prior to 5.0.5

Description The issue allows a remote authenticated attacker with admin privileges to achieve remote code execution through OS command injection in the admin web console.

Recommendations For Ivanti CSA versions prior to 5.0.5, update to version 5.0.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the admin web console to minimize the risk of exploitation.

Fix

RCE

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2025-04004

CVE-2024-47908

Affected Products

Ivanti Csa

References · 25

• https://nvd.nist.gov/vuln/detail/CVE-2024-47908 · Security Note
• https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-47908-CVE-2024-11771 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-04004 · Security Note
• https://osv.dev/vulnerability/CVE-2024-47908 · Vendor Advisory
• https://t.me/thehackernews/6324 · Telegram Post
• https://twitter.com/the_yellow_fall/status/1889339832784314616 · Twitter Post
• https://twitter.com/Dinosn/status/1889379820644999462 · Twitter Post
• https://twitter.com/securestep9/status/1889426612921442372 · Twitter Post
• https://twitter.com/CveFindCom/status/1889337131870429222 · Twitter Post
• https://t.me/true_secator/6726 · Telegram Post
• https://twitter.com/achi_tech/status/1890077207671746616 · Twitter Post
• https://twitter.com/gothburz/status/1889398580739448834 · Twitter Post
• https://twitter.com/fridaysecurity/status/1889340451456524576 · Twitter Post
• https://twitter.com/moton/status/1889486098617012490 · Twitter Post
• https://twitter.com/fletch_ai/status/1889540104705941669 · Twitter Post