Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2024-7593 — Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel. | Kitploit
Tools/GitHubGitHub/rxerium/cve-2024-7593
Vulnerability ScannersVulnerability AnalysisExploitationWeb SecurityPenetration TestingAuthentication
GitHubrxerium/cve-2024-7593

CVE-2024-7593

Incorrect implementation of an authentication algorithm in Ivanti vTM other than versions 22.2R1 or 22.7R2 allows a remote unauthenticated attacker to bypass authentication of the admin panel.

View Repository
10 months agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
Website

CVE-2024-7593 Detection

How does this detection method work?

This template matches on the following versions, if there is a match then the host is considered vulnerable:

root@kitploit:~
- "22.2"
- "22.3"
- "22.3R2"
- "22.5R1"
- "22.6R1"
- "22.7R1"

To prevent producing any FPs it also matches on the below:

root@kitploit:~
- type: word
part: body
words:
    - "Login (Virtual Traffic Manager"

How do I run this script?

  1. Download Nuclei from here
  2. Copy the template to your local system
  3. Run the following command: nuclei -u https://yourHost.com -t template.yaml

References

  • https://arcticwolf.com/resources/blog/cve-2024-7593-cve-2024-7569/
  • https://nvd.nist.gov/vuln/detail/CVE-2024-7593
  • https://www.tenable.com/blog/cve-2024-7593-ivanti-virtual-traffic-manager-authentication-bypass-vulnerability

Disclaimer

Use at your own risk, I will not be responsible for illegal activities you conduct on infrastructure you do not own or have permission to scan.

Contact

If you have any questions please do reach out to me via Signal or via email: [email protected].

If you'd like to support my work, feel free to donate via Buy Me a Coffee — your support means a lot and is truly appreciated!

Download Tool