Ivanti虛擬流量管理系統存在身分驗證繞過漏洞，已有概念性驗證程式碼公開，用戶應儘速處理
支付動態 · 2024-08-14
Ivanti發布資安公告指出，虛擬流量管理系統Virtual Traffic Manager（vTM）部分版本存在零時差漏洞CVE-2024-7593，由於已有公開的概念性驗證程式碼，攻擊者無須自行從頭研究漏洞，很有可能即將被用於實際攻擊，該公司呼籲用戶應儘速採取緩解措施因應
8月12日Ivanti發布資安公告，指出旗下的虛擬流量管理系統Virtual Traffic Manager（vTM）存在重大層級的零時差漏洞CVE-2024-7593，一旦攻擊者成功利用漏洞，就有機會繞過身分驗證並建立新的管理員帳號，CVSS風險評分為9.8。
值得留意的是，雖然該公司表示尚未察覺用戶遭到漏洞攻擊的跡象，但已有公開的概念性驗證（PoC）程式碼，他們呼籲用戶儘速採取緩解措施因應。
不過，並非所有版本的vTM都受到影響，Ivanti指出，今年3月發布的22.2R1、5月發布的22.7R2，皆不受這項漏洞影響，其餘版本預計8月19日這週發布更新，予以修補。
热门文章
Institutional Academy that exceeded expectations marked the opening of GAT CDMX
Online Game
DB Gaming Is One of Asia’s Top-Tier Game Solution Providers, Recognized as a Pioneer in the Asian Gaming Industry.
Marketing
That’s a Wrap: AffPapa Conference Madrid 2026 Highlights
Online Game
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
New Jersey July Gambling Revenue Hits $606M, Sweeps Casinos Banned
Regulation
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
JILI Partners with Cricket Legend AB de Villiers (ABD) to Launch Exclusive Branded Game Series 100% 11
Sports Game
Zenith partners with HUIDU for 2026 World Cup Carnival Official Tour
Online Game
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Indiana online casino bill stalls in House committee
Regulation
Manila delivers: Highlights from SiGMA Asia 2026
Southeast Asia
