Ivanti warns of critical vTM auth bypass with public exploit

Ivanti disclosed a critical authentication bypass vulnerability (CVE-2024-7593) in Virtual Traffic Manager (vTM) that can let remote unauthenticated attackers bypass admin authentication and create rogue administrator accounts; Ivanti released patches for some versions, plans additional fixes, and warns administrators to restrict management interface access and check audit logs, while noting a public proof-of-concept exists and referencing prior exploited Ivanti vulnerabilities.