> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# PoC for CVE-2024-7593 Ivanti Virtual Traffic Manager 22.2R1 / 22.7R2 Admin Panel Authentication Bypass
- URL: https://darkwebinformer.com/poc-for-cve-2024-7593-ivanti-virtual-traffic-manager-22-2r1-22-7r2-admin-panel-authentication-bypass/
- Published: 2024-09-25T22:31:04.000Z
- Updated: 2025-09-04T22:26:23.000Z
- Author: Dark Web Informer
- Tags: Vulnerabilities, Tools

GitHub: <https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit>  
Last Commit: September 25th, 2024

---

# CVE-2024-7593 Exploit Script

[](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#cve-2024-7593-exploit-script)

This Bash script serves as a proof of concept (PoC) for exploiting the authentication bypass vulnerability in Ivanti vTM (CVE-2024-7593). It allows users to create a new admin user on the target system.

## Table of Contents

[](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#table-of-contents)

- [Prerequisites](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#prerequisites)
- [Usage](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#usage)
- [Parameters](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#parameters)
- [Example](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#example)
- [Author](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#author)
- [License](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#license)

## Prerequisites

[](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#prerequisites)

Make sure you have the following installed on your system:

- curl: This script uses `curl` to send HTTP requests.

You can check if curl is installed by running:

`bash command -v curl`

If it's not installed, you can install it using your package manager. For example, on Ubuntu:

`sudo apt-get install curl`

## Usage

[](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#usage)

To run the script, change permissions to +x and use the following command:

`./CVE-2024-7593.sh -u <host> -p <port>`

`<host>`: The target host (e.g., example.com).

`<port>`: The target port (e.g., 9090).

## Example

[](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#example)

`./CVE-2024-7593.sh -u example.com -p 9090`

![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2024/09/3295982.png)

## Response Handling

[](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#response-handling)

If the new user is successfully created, the script will display the login credentials. If the user creation fails, it will inform you of the failure.

## Author

[](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#author)

D3N14LD15K ::: D3N14LD15K\[at\]BUGCROWDNINJA.COM ::: X.COM/D3N14LD15K

## Disclaimer

[](https://github.com/D3N14LD15K/CVE-2024-7593%5FPoC%5FExploit#disclaimer)

This proof of concept is for educational purposes only. You are responsible for your own use of this script.