Authentication Bypass in Ivanti Virtual Traffic Manager (CVE‑2024‑7593) Enables Remote Admin Account Creation
What It Is – Ivanti Virtual Traffic Manager (VTM) contains an authentication‑bypass flaw (CVE‑2024‑7593) that allows a remote, unauthenticated attacker to create a chosen administrator account with full privileges.
Exploitability – The vulnerability is publicly disclosed, has a public proof‑of‑concept, and can be exploited over the network without prior access. (CVSS ≈ 8.8 – High).
Affected Products – Ivanti Virtual Traffic Manager (all supported versions prior to the vendor‑issued patch).
Why It Matters for Trust & Control Assurance
- Tests the access‑control and privileged‑account governance control objective that underpins many frameworks (e.g., NIST CSF, ISO 27001).
- Highlights the need for continuous monitoring of vendor patch status as evidence of due‑diligence in audit trails.
- Demonstrates why enterprises must maintain defensible evidence of privileged‑account provisioning controls to satisfy auditors and security reviewers.
Recommended Actions
- Deploy Ivanti’s security patch for CVE‑2024‑7593 without delay.
- Review privileged‑account creation workflows; enforce MFA and multi‑step approval.
- Enable logging and real‑time alerts for any new admin account creation in VTM.
- Capture remediation steps and evidence in your control‑mapping repository for audit readiness.
Source: CISA KEV – CVE‑2024‑7593