1377 matches found
CVE-2024-39709
CVE-2024-39709 involves Ivanti Connect Secure and Ivanti Policy Secure where the root cause is incorrect file permissions. A local, authenticated attacker can escalate privileges on affected builds prior to 22.6R2 (Connect Secure) and prior to 22.7R1 (Policy Secure). Connected documents confirm t...
CVE-2024-39710
CVE-2024-39710 involves argument injection in Ivanti Connect Secure (pre-22.7R2.1) and Ivanti Policy Secure (pre-22.7R1.1). An authenticated admin can exploit the web interfaces to achieve remote code execution. The issue affects the web-facing components and is reported with a 9.1/CRITICAL CVSS....
CVE-2024-39712
CVE-2024-39712 describes an argument injection vulnerability in Ivanti Connect Secure prior to 22.7R2.1 and 9.1R18.7, and Ivanti Policy Secure prior to 22.7R1.1, that allows a remote authenticated attacker with administrative privileges to achieve remote code execution via the web interface (note...
CVE-2024-38649
An out-of-bounds write in IPsec of Ivanti Connect Secure before version 22.7R2.1Not Applicable to 9.1Rx allows a remote unauthenticated attacker to cause a denial of service...
CVE-2024-39709
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1 Not Applicable to 9.1Rx allow a local authenticated attacker to escalate their privileges...
CVE-2024-38655
Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.1 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-39711
CVE-2024-39711 describes an argument-injection vulnerability in Ivanti Connect Secure prior to 22.7R2.1 and 9.1R18.7, and Ivanti Policy Secure prior to 22.7R1.1. A remote, authenticated attacker with admin privileges can achieve remote code execution via the administrative web interface. The issu...
CVE-2024-38655
CVE-2024-38655 is an argument-injection flaw in Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS) that allows a remote authenticated attacker with admin privileges to achieve remote code execution. Affected: ICS before 22.7R2.1 (not applicable to 9.1Rx) and IPS before 22.7R1.1 (not appli...
Ivanti Connect Secure和Ivanti Policy Secure 参数注入漏洞
Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A parameter injection vulnerability exists in Ivanti Connect Secure versio...
Ivanti Connect Secure和Ivanti Policy Secure 参数注入漏洞
Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A parameter injection vulnerability exists in Ivanti Connect Secure versio...
Ivanti Connect Secure和Ivanti Policy Secure 参数注入漏洞
Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A parameter injection vulnerability exists in Ivanti Connect Secure versio...
Ivanti Connect Secure和Ivanti Policy Secure 安全漏洞
Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A security vulnerability exists in Ivanti Connect Secure versions prior to...
Ivanti Connect Secure 缓冲区错误漏洞
Ivanti Connect Secure is an enterprise-grade SSL VPN remote access solution for securely connecting to corporate resources over an encrypted channel, with support for a zero-trust architecture and multiple deployment options. Ivanti Connect Secure suffers from an out-of-bounds read vulnerability...
Ivanti Connect Secure 缓冲区错误漏洞
Ivanti Connect Secure is an enterprise-grade SSL VPN remote access solution for securely connecting to corporate resources over an encrypted channel, with support for a zero-trust architecture and multiple deployment options. Ivanti Connect Secure suffers from a buffer overflow vulnerability that...
Ivanti Connect Secure和Ivanti Policy Secure 参数注入漏洞
Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A parameter injection vulnerability exists in Ivanti Connect Secure versio...
Ivanti Connect Secure和Ivanti Policy Secure 参数注入漏洞
Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a network access control NAC solution. A parameter injection vulnerability exists in Ivanti Connect Secure versio...
CVE-2024-11005
Command injection in Ivanti Connect Secure before version 22.7R2.1 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1.1 Not Applicable to 9.1Rx allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-11006
Command injection in Ivanti Connect Secure before version 22.7R2.1 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1.1 Not Applicable to 9.1Rx allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-11005
Command injection in Ivanti Connect Secure before version 22.7R2.1 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1.1 Not Applicable to 9.1Rx allows a remote authenticated attacker with admin privileges to achieve remote code execution...
CVE-2024-11006
Command injection in Ivanti Connect Secure before version 22.7R2.1 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1.1 Not Applicable to 9.1Rx allows a remote authenticated attacker with admin privileges to achieve remote code execution...