CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-01-12
Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability (CVE-2023-46805) Security Advisory
[Affected Scope] Ivanti Connect Secure (ICS) versions 9.x, 22.x and Ivanti Policy Secure gateways
[Impact] Unauthenticated remote attackers can bypass access control checks on the web component, gaining unauthorized access to restricted resources and sensitive configuration data
[Mitigation] Immediately apply the official vendor patches or import the temporary mitigation XML profile provided by Ivanti to block the exploitation path