← All advisories

Critical severity10.0NVD Advisory· Published Dec 10, 2024· Updated Jun 17, 2026

CVE-2024-11639

CVE-2024-11639

Description

An authentication bypass in the admin web console of Ivanti CSA before 5.0.3 allows a remote unauthenticated attacker to gain administrative access

Affected products

3

Ivanti/CSAllm-fuzzy
Range: <5.0.3
Ivanti/Cloud Services Applicationcpe-rescue
Range: 5.0.3
Ivanti/Cloud Services Appliance
cpe:2.3:a:ivanti:cloud_services_appliance:*:*:*:*:*:*:*:*
Range: <5.0.3

Patches

Vulnerability mechanics

References

1

forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-11639-CVE-2024-11772-CVE-2024-11773nvdVendor Advisory

News mentions

0

No linked articles in our index yet.