← CVE Intelligence

CVE-2024-21893

Ivanti / ICS PUBLISHED

Description (CNA)

A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.

Affected (CNA)

Vendor / productVersions
Ivanti / ICSaffected 9.1R18 through 9.1R18; affected 22.6R2 through 22.6R2
Ivanti / IPSaffected 9.1R18 through 9.1R18; affected 22.6R1 through 22.6R1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

CVE

No English description supplied.