This Metasploit module exploits an access control issue in Ivanti Virtual Traffic Manager (vTM), by adding a new administrative user to the web interface of the application. Affected versions include 22.7R1, 22.6R1, 22.5R1, 22.3R2, 22.3, 22.2.
dab5044c8735a098cfaf47e4ebd200fa7557df0966f1ad880b0d03bd3168ae30