Ref# ADV2024_280 | Date: Aug 15th 2024

---

Ivanti has published a security advisory to address vulnerabilities affecting the following products on August 13, 2024. It is recommended that you take the necessary precautions to ensure your products are always protected.

• Ivanti Virtual Traffic Manager – versions 22.2, 22.3, 22.3R2, 22.5R1, 22.6R1 and 22.7R1
• Ivanti Neurons for ITSM – versions 2023.2, 2023.3 and 2023.4
• Ivanti Avalanche – versions 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.4.0, 6.4.1, 6.4.2 and 6.4.3

For more information on these updates, you can follow these URLs:

1. Security Advisory: Ivanti Virtual Traffic Manager (vTM ) (CVE-2024-7593)
2. Security Advisory: Ivanti Neurons for ITSM (CVE-2024-7569, CVE-2024-7570)
3. Security Advisory Ivanti Avalanche 6.4.4 (CVE-2024-38652, CVE-2024-38653, CVE-2024-36136, CVE-2024-37399, CVE-2024-37373)

The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary.

PDF Download: Ivanti Security Advisory

References

• Ivanti Forums. (2024, August 13). Retrieved from Ivanti. https://forums.ivanti.com/s/searchallcontent?language=en_US&sort=date%20descending&f%3A%40sfkbknowledgearticletypec=%5BSecurity%20Advisory%5D%20#t=All&sort=date%20descending
• Ivanti security advisory. (2024, August 13). Retrieved from Canadian Centre for Cyber Security. https://www.cyber.gc.ca/en/alerts-advisories/ivanti-security-advisory-av24-456