This Metasploit module exploits an access control issue in Ivanti Virtual Traffic Manager (vTM), by adding a new administrative user to the web interface of the application. Affected versions include 22.7R1, 22.6R1, 22.5R1, 22.3R2, 22.3, 22.2.
dab5044c8735a098cfaf47e4ebd200fa7557df0966f1ad880b0d03bd3168ae30
Ivanti ADC version 9.9 suffers from an authentication bypass vulnerability.
0ae1fab25861b80abe6cec837486cb13f326931260c2697ace240a741c9d04e1