Ivanti security advisory (AV24-456)

Serial number: AV24-456
Date: August 13, 2024

On August 13, 2024, Ivanti published security advisories to address critical vulnerabilities in the following products:

• Ivanti Virtual Traffic Manager – versions 22.2, 22.3, 22.3R2, 22.5R1, 22.6R1 and 22.7R1
• Ivanti Neurons for ITSM – versions 2023.2, 2023.3 and 2023.4
• Ivanti Avalanche – versions 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.4.0, 6.4.1, 6.4.2 and 6.4.3

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Security Advisory: Ivanti Virtual Traffic Manager (vTM) (CVE-2024-7593)
• Security Advisory: Ivanti Neurons for ITSM (CVE-2024-7569, CVE-2024-7570)
• Security Advisory Ivanti Avalanche 6.4.4 (CVE-2024-38652, CVE-2024-38653, CVE-2024-36136, CVE-2024-37399, CVE-2024-37373)
• Ivanti Security Advisories