CVE-2023-39340
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD
Description
A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific request which may lead to Denial of Service (DoS) of the appliance.
Affected (60)
Products: Ivanti: Connect Secure
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 22.1 r1 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 9.1 r1.0 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 22.6 |
References (2)
Source: support@hackerone.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.