Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.
CISA has listed this vulnerability in the Known Exploited Vulnerabilities catalog.
Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.
Confirm exposure before applying a vendor-supported change.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Due date: 2024.10.15Confirm that Ivanti Virtual Traffic Manager and an affected version are present.
Combine exploitation signals with asset exposure and business criticality.
Follow the vendor advisory or supported update path and preserve rollback options.
Recheck the version, service health, access paths, and relevant logs.
