CVE-2024-11771 Details
Description
Path traversal in Ivanti CSA before version 5.0.5 allows a remote unauthenticated attacker to access restricted functionality.
A path traversal vulnerability has been identified in Ivanti Cloud Services Application (CSA) versions prior to 5.0.5. This vulnerability allows remote unauthenticated attackers to access restricted functionality within the application.
Users are advised to upgrade to Ivanti Cloud Services Application version 5.0.5. Instructions for downloading the update are available on the Ivanti Download Portal.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Feb 11, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-47908-CVE-2024-11771 | ivanti | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | ivanti |
Affected Products
| Product | Versions |
|---|---|
| ivanti cloud services appliance | < 5.0.5 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | ivanti |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jul 14, 2025 | Initial Analysis | [email protected] |
| Feb 11, 2025 | New CVE Received | ivanti |