3 More Ivanti Cloud Vulns Exploited in the Wild

Ivanti has disclosed three additional vulnerabilities in its Cloud Services Appliance (CVE-2024-9379, CVE-2024-9380, CVE-2024-9381) that are being chained with a previously reported zero-day (CVE-2024-8963) and observed in limited exploitation; issues include remote-authenticated SQL execution, OS command injection enabling RCE with admin privileges, and path traversal affecting CSA versions prior to 5.0, with vendor guidance to review administrative users/EDR alerts and to rebuild to version 5.0 if compromise is suspected.