1580 matches found
CVE-2024-22024: Improper Restriction of XML External Entity Reference
An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x, Ivanti Policy Secure 9.x, 22.x and ZTA gateways which allows an attacker to access certain restricted resources without authentication...
Ivanti Connect Secure and Ivanti Policy Secure Code Issue Vulnerabilities
Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a Network Access Control NAC solution. Ivanti Connect Secure and Ivanti Policy Secure have a code issue...
Ivanti Addresses Yet Another VPN Flaw Within a Month
Summary: Ivanti has addressed a newly discovered vulnerability impacting ZTA, Policy, and Connect Secure gateways. Tracked as CVE-2024-22024, this vulnerability stems from a weakness in the SAML component of the gateways related to XXE XML eXternal Entities, enabling remote attackers to access...
Ivanti urges customers to patch yet another critical vulnerability
In a new blog post, Ivanti says that it has found another vulnerability and urges customers to βimmediately take action to ensure you are fully protectedβ. This vulnerability only affects a limited number of supported versionsβIvanti Connect Secure version 9.1R14.4, 9.1R17.2, 9.1R18.3, 22.4R2.2 a...
Exploit for Improper Restriction of XML External Entity Reference in Ivanti Connect_Secure
CVE-2024-22024 Check for CVE-2024-22024 vulnerability in Ivant...
Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways
Ivanti has alerted customers of yet another high-severity security flaw in its Connect Secure, Policy Secure, and ZTA gateway devices that could allow attackers to bypass authentication. The issue, tracked as CVE-2024-22024, is rated 8.3 out of 10 on the CVSS scoring system. "An XML external enti...
Vulnerability fixed in Ivanti Connect Secure and Policy Secure Gateways
Ivanti has fixed a vulnerability in Ivanti Connect Secure, Policy Secure and ZTA gateway. The vulnerability allows a malicious party to use an XML External Entity attack to gain access to system resources without having the required authentication. The vulnerability was discovered during the...
CVE-2024-22024 (XXE) for Ivanti Connect Secure and Ivanti Policy Secure
Executive Summary: As part of the ongoing investigation, we discovered a new vulnerability as part of our internal review and testing of our code, which was also responsibly disclosed by watchTowr. This vulnerability only affects a limited number of supported versions β Ivanti Connect Secure...
Ivanti Connect Secure 9.x / 22.x Server-Side Request Forgery
Ivanti Connect Secure 9.x, 22.x suffers from a Server-Side Request Forgery. By crafting a specific HTTP request, a remote attacker could exploit this vulnerability to access certain restricted resources without authentication. No source data...
VulnCheck KEV: CVE-2024-22024
An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x, Ivanti Policy Secure 9.x, 22.x and ZTA gateways which allows an attacker to access certain restricted resources without authentication...
The vulnerability of the web components of Ivanti Connect Secure and Ivanti Policy Secure control tools allows a perpetrator toβ¦
The vulnerability of the Ivanti Connect Secure and Ivanti Policy Secure web components related to access control vulnerabilities. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the level of an administrator...
The vulnerability of the SAML components in Ivanti Connect Secure and Ivanti Policy Secure access control tools allows a perpetrator to disclose protected information.
The vulnerability of the SAML components in Ivanti Connect Secure and Ivanti Policy Secure network access control tools is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to disclose protected information...
Ivanti Connect Secure 9.x / 22.x SSRF-RCE Chain (CVE-2024-21893)
Binary data ivanticsssrfrceCVE-2024-21893.nbin...
Ivanti Connect Secure 9.x / 22.x SSRF (CVE-2024-21893)
Binary data ivanticsCVE-2024-21893.nbin...
Ivanti Connect Secure Server-Side Request Forgery
Added: 02/05/2024 Background Ivanti Connect Secure is a web-based remote access VPN. Problem A server-side request forgery vulnerability in the SAML component allows attackers to access restricted resources without authentication. This can lead to remote command execution when chained with other...
Ivanti Connect Secure Server-Side Request Forgery
Added: 02/05/2024 Background Ivanti Connect Secure is a web-based remote access VPN. Problem A server-side request forgery vulnerability in the SAML component allows attackers to access restricted resources without authentication. This can lead to remote command execution when chained with other...
Exploit for Command Injection in Ivanti Connect_Secure
Introduction π This repository contains a Python script desi...
Exploit for Server-Side Request Forgery in Ivanti Connect_Secure
CVE-2024-21893 is server-side request forgery vulnerability in...
Ivanti Addresses Zero-Day Vulnerability Exploited in Attacks
Summary: Ivanti has addressed two new high-severity vulnerabilities, CVE-2024-21893 and CVE-2024-21888, affecting its Connect Secure and Policy Secure products. CVE-2024-21893, in particular, has been actively exploited in the wild, posing a significant risk to affected systems. Threat Level - Re...