Lucene search
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.IVANTI_PS_SSRF_RCE_CVE-2024-21893.NBINHistoryFeb 06, 2024 - 12:00 a.m.
Ivanti Policy Secure 9.x / 22.x SSRF-RCE Chain (CVE-2024-21893)
2024-02-0600:00:00
This script is Copyright (C) 2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
14
ivanti policy secure
ssrf-rce
cve-2024-21893
binary data
scanner
7.1 High
AI Score
Confidence
Low
The Ivanti Policy Secure installed on the remote host is 9.x or 22.x. It is, therefore, affected by a server-side request forgery vulnerability in web components of Ivanti Policy Secure (9.x, 22.x) which allows an unauthenticated attacker to send specially crafted requests to cause unauthorized command executions. This vulnerability can be exploited over the internet.
Binary data ivanti_ps_ssrf_rce_CVE-2024-21893.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| ivanti | policy_secure | cpe:/a:ivanti:policy_secure | |
| pulse_secure | pulse_policy_secure | cpe:/a:pulse_secure:pulse_policy_secure |
Related
hackread
hackread
cvelist
cvelist
CVE-2024-21893
2024-01-31 17:51:35
hivepro
hivepro
Attacks, Vulnerabilities and Actors 29 January to 4 February 2024
2024-02-06 08:18:54
Ivanti Addresses Zero-Day Vulnerability Exploited in Attacks
2024-02-02 15:18:18
Ivanti Gateways Under Attack by Cybercriminals Patch Now
2024-03-01 15:08:13
prion
prion
Server side request forgery (ssrf)
2024-01-31 18:15:00
cve
cve
CVE-2024-21893
2024-01-31 18:15:47
cisa_kev
cisa_kev
nessus
nessus
Ivanti Policy Secure 9.x / 22.x SSRF (CVE-2024-21893)
2024-02-06 00:00:00
Ivanti Connect Secure 9.x / 22.x SSRF-RCE Chain (CVE-2024-21893)
2024-02-06 00:00:00
Ivanti Connect Secure 9.x / 22.x SSRF (CVE-2024-21893)
2024-02-06 00:00:00
githubexploit
githubexploit
Exploit for Server-Side Request Forgery in Ivanti Connect Secure
2024-02-02 22:59:21
talosblog
talosblog
Spyware isn’t going anywhere, and neither are its tactics
2024-02-08 19:00:53
thn
thn
nuclei
nuclei
Ivanti SAML - Server Side Request Forgery (SSRF)
2024-02-03 08:20:02
wizblog
wizblog
malwarebytes
malwarebytes
CISA: Disconnect vulnerable Ivanti products TODAY
2024-02-02 14:18:43
ics
ics
metasploit
metasploit
Ivanti Connect Secure Unauthenticated Remote Code Execution
2024-02-06 11:49:04
zdt
zdt
Ivanti Connect Secure Unauthenticated Remote Code Execution Exploit
2024-02-21 00:00:00
rapid7blog
rapid7blog
Zero-Day Exploitation of Ivanti Connect Secure and Policy Secure Gateways
2024-01-11 13:00:40
Metasploit Weekly Wrap-Up 02/23/2024
2024-02-23 17:50:39
packetstorm
packetstorm
Ivanti Connect Secure Unauthenticated Remote Code Execution
2024-02-21 00:00:00
avleonov
avleonov