WID-SEC-W-2024-0262

DeutschShown in its original language — a full translation is planned for a future version.

Ivanti Connect Secure: Mehrere Schwachstellen

view advisory published 2024-01-31

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Ivanti Connect Secure ausnutzen, um seine Privilegien zu erhöhen oder Sicherheitsvorkehrungen zu umgehen.

describes (2)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-21893US	high8.2OT critical	100.0% (100th)	KEV	2024-01-31
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an att…
CVE-2024-21888US	high8.8	85.4% (100th)	—	2024-01-31
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an ad…

references

External citations — patches, advisories, analysis.

Ivanti Security Advisory vom 2024-01-31external
Github Security Advisory vom 2024-01-31external
WID-SEC-W-2024-0262 - CSAF Versionself
WID-SEC-2024-0262 - Portal Versionself
CISA Known Exploited Vulnerabilities vom 2024-01-31external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan