Ivanti vADC 9.9 Authentication Bypass

[0x45dd]

This module exploits CVE-2024-7593, an authentication bypass vulnerability in Ivanti vADC 9.9. The vulnerability allows an attacker to create new admin users without proper authentication.

rubocop executed,

1 file inspected, 38 offenses detected, 34 offenses corrected, 1 more offense can be corrected with rubocop -A

[wvu]

#19386

[bwatters-r7]

This is the same CVE in a different product? #19386 is for vTM, this is for vAC? From a quick glance, they are different requests and checks, so I'm inclined to keep both unless there's precedent I don't know about or until I can do some more research?
EDIT: If there's a clean way to add it to the existing file, that'd be cool, though....
EDIT.EDIT: So vTC is a sub component of vADC?
https://www.ivanti.com/products/virtual-application-delivery-controller
I think part of the reason I thought these were different was that the other uses the bypass mentioned in https://www.exploit-db.com/exploits/52062 to not need to use the /wizard.fcgi in the uri.