{"id":"CVE-2024-7593","aliases":["EUVD-2024-48489","GHSA-8j5m-w2v7-mx38"],"status":"published","title":"Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1...","description":"Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.99999,"percentile":0.99991,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-287","CWE-303"],"published":"2024-08-13T18:17:47Z","modified":"2026-06-17T08:20:30Z","kev":{"date_added":"2024-09-24","due_date":"2024-10-15","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2024-09-24"},{"source":"kev","since":"2024-09-24"}],"exploits":[{"source":"pocgithub","id":"rxerium/CVE-2024-7593","title":"rxerium/CVE-2024-7593","date":"2024-08-28","url":"https://github.com/rxerium/CVE-2024-7593"},{"source":"pocgithub","id":"D3N14LD15K/CVE-2024-7593_PoC_Exploit","title":"D3N14LD15K/CVE-2024-7593_PoC_Exploit","date":"2024-09-24","url":"https://github.com/D3N14LD15K/CVE-2024-7593_PoC_Exploit"},{"source":"pocgithub","id":"aerchy/CVE-2024-7593","title":"aerchy/CVE-2024-7593","date":"2024-10-12","url":"https://github.com/aerchy/CVE-2024-7593"},{"source":"metasploit","id":"auxiliary/admin/http/ivanti_vtm_admin","title":"Ivanti Virtual Traffic Manager Authentication Bypass (CVE-2024-7593)","type":"auxiliary","date":"2024-08-05","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/admin/http/ivanti_vtm_admin"},{"source":"nuclei","id":"CVE-2024-7593","title":"Ivanti vTM - Authentication Bypass","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7593.yaml"}],"products":[{"vendor":"ivanti","product":"virtual traffic manager"},{"vendor":"ivanti","product":"virtual_traffic_manager"},{"vendor":"ivanti","product":"vtm"}],"references":[{"url":"https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Virtual-Traffic-Manager-vTM-CVE-2024-7593","tags":["Mitigation","Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-7593","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-7593"},{"url":"https://github.com/advisories/GHSA-8j5m-w2v7-mx38"}],"sources":{"cve":[{"id":"CVE-2024-7593","description":"Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.","status":"published","published":"2024-08-13T18:17:47.248Z","modified":"2025-10-21T22:55:47.493Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-287","CWE-303"],"updated_at":"2026-11-02T14:34:20.673123Z"}],"euvd":[{"id":"EUVD-2024-48489","description":"Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.","status":"published","published":"2024-08-13T18:17:47Z","modified":"2025-10-21T22:55:47Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2024-09-24","updated_at":"2026-11-02T20:31:28.525814Z"}],"ghsa":[{"id":"GHSA-8j5m-w2v7-mx38","title":"Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1...","description":"Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.","status":"published","published":"2024-08-13T21:31:56Z","modified":"2025-10-22T00:34:11Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T15:04:08.734574Z"}],"kev":[{"id":"CVE-2024-7593","title":"Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability","description":"Ivanti Virtual Traffic Manager contains an authentication bypass vulnerability that allows a remote, unauthenticated attacker to create a chosen administrator account.","cwes":["CWE-287","CWE-303"],"kev":{"date_added":"2024-09-24","due_date":"2024-10-15","required_action":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2024-7593","description":"Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.","status":"published","published":"2024-08-13T19:15:16.94Z","modified":"2026-06-17T08:20:30.86Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-287","CWE-303"],"updated_at":"2026-11-02T14:10:18.563492Z"}]}}