ASSURANT

™ 

Ivanti Releases Security Update for Cloud Services Appliance

September 13, 2024

Ivanti Releases Security Update for Cloud Services Appliance
All CISA Advisories, CISA, September 13, 2024

Ivanti has released a security update addressing an OS command injection vulnerability (CVE-2024-8190) affecting Ivanti Cloud Services Appliance (CSA) 4.6 (all versions before patch 519). A cyber threat actor could exploit this vulnerability to take control of an affected system.  

At this time, Ivanti has confirmed limited exploitation and urges its customers using the affected versions to upgrade to CSA version 5.0. Ivanti no longer supports CSA 4.6 (end-of-life). 

CISA recommends users and administrators review the Ivanti security advisory and apply the recommended updates. 

Note: CISA has added CVE-2024-8190 to its Known Exploited Vulnerabilities Catalog, which, per Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the specified due date to protect FCEB networks against active threats. 

Comprehensive Cyber Security is Complex

1,000+ ASSURANT™ Users

10,000+ Systems/sub-systems analyzed

40,000+ Manhours saved

How to Get Started

Schedule a Call

Speak with an ASSURANT™ team member to learn how ASSURANT™ can support your organization or project.

See ASSURANT™ in Action

Schedule an ASSURANT™ demo to see how other organizations have modeled and analyzed their systems

Try it out today

Receive access to ASSURANT™ to model your use case or scenario.

What Our Clients Say

“This system allowed me to identify missing components when the model validation engine ran. These were components which had infrequent changes and therefore were not commonly documented. The ASSURANT™ model told us that there were some elements missing. When we compared our sources against the model result, we discovered existing legacy components which had previously lacked documentation. The addition of these components to the model has given us confidence in the model’s completeness and improved our cyber readiness.”

Picture of a man silhouetted against a setting sun

Cyber Model Engineer

“Without the ASSURANT™ attack path analysis visual capability, it’s difficult to explain the complexities of a cyber battlespace to non-experts, and us good guys in the fight are often only learning from our mistakes in the wake of a cyber-attack. The different ways to visualize attack paths allows time to get ahead of the tactics and techniques of cyber actors by allowing us to simulate “black hat” scenarios for when a network artifact becomes compromised.”

Picture of a man silhouetted against a setting sun

Attack Path Analyst

Latest News Posts

Latest Blog Posts

Contact Us

1408 University Dr
College Station, TX 77840
(979) 260-1980
sales@kbsi.com

Resources
Identify and Prioritize Your Business Cyber Risks with ASSURANT™

Visit us at our parent website – KBSI.com

 

This material is based upon work supported by the United States Air Force under Contract No. FA8650-23-D-1061. Any opinions, findings and conclusions or recommendations expressed in this material are those of the author(s) and do not necessarily reflect the views of the United States Air Force.

© 2024 KBSI – Innovative Ideas and Technologies | Privacy Policy | Legal Notices

Go to Top