Exploit for Improper Restriction of XML External Entity Reference in Ivanti Connect_Secure

🗓️ 09 Feb 2024 14:31:56Reported by 0dteamType

Vulnerability in Ivanti Connect Secure (ICS) for improper restriction of XML external entity reference. Check for CVE-2024-22024

Reporter	Title	Published	Views	Family All 29
ICS	Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways	29 Feb 202412:00	–	ics
Akamai Blog	Scanning Activity for CVE-2024-22024 (XXE) Vulnerability in Ivanti	14 Feb 202406:00	–	akamaiblog
ATTACKERKB	CVE-2024-22024	13 Feb 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of Ivanti Connect Secure (previously known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons for Zero Trust Access (nZTA) – tools for authentication and access control – stems from incorrect restrictions on XML links to external objects. This allows attackers to gain unauthorized access to protected information.	14 Feb 202400:00	–	bdu_fstec
Circl	CVE-2024-22024	10 Jan 202420:21	–	circl
CISA	Updated: New Software Updates and Mitigations to Defend Against Exploitation of Ivanti Connect Secure and Policy Secure Gateways	15 Feb 202412:00	–	cisa
CNNVD	Ivanti Connect Secure and Ivanti Policy Secure Code Issue Vulnerabilities	13 Feb 202400:00	–	cnnvd
CVE	CVE-2024-22024	13 Feb 202404:07	–	cve
Cvelist	CVE-2024-22024	13 Feb 202404:07	–	cvelist
hivepro	Ivanti Addresses Yet Another VPN Flaw Within a Month	12 Feb 202411:47	–	hivepro