CVE-2023-41719
7.2
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: NVD
Description
A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution.
Affected (53)
Products: Ivanti: Connect Secure
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 21.12 r1 |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| Version 22.5 r1.1 |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| Version 22.6 |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| Version 9.1 r10.2 |
References (2)
Source: support@hackerone.com
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Timeline
No history available yet.