Multiple Vulnerabilities in Ivanti Products Could Allow for Remote Code Execution

Multiple vulnerabilities have been discovered in Ivanti products, the most severe of which could allow for remote code execution.

• Ivanti Avalanche is a mobile device management system.
• Ivanti Neurons for ITSM is an IT Service Management Software.
• Ivanti Virtual Traffic Manager is a software-based application delivery controller.

Successful exploitation could allow for remote code execution in the context of the system. Depending on the privileges associated with the system, an attacker could then install programs; view, change, or delete data.