伊万蒂证实攻击者利用CSA漏洞CVE-2024-8190; CISA敦促立即采取行动. Ivanti confirms attackers exploit CSA vulnerability CVE-2024-8190; CISA urges immediate action.

Ivanti证实,攻击者利用了被确定为CVE-2024-8190的云服务设备(CSA)的严重脆弱性。 Ivanti confirmed that a serious vulnerability in its Cloud Service Appliance (CSA), identified as CVE-2024-8190, has been exploited by attackers. OS指令注射缺陷影响到第519补丁之前的版本,包括无支持的CSA 4.6。 This OS command injection flaw affects versions prior to patch 519, including the unsupported CSA 4.6. Ivanti建议将用户升级为5.0版,以获得支持。 Ivanti recommends users upgrade to version 5.0 for support. 美国网络安全和基础设施安全局 (CISA) 发布了一份咨询报告,强调解决这一问题的紧迫性. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory emphasizing the urgency of addressing this issue.