CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-01-31
Ivanti Connect Secure and Policy Secure SAML Component SSRF Vulnerability (CVE-2024-21893) Security Advisory
[Affected Scope] Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x), and Ivanti Neurons for ZTA
[Impact] Unauthenticated remote attackers can exploit the SAML component to bypass authentication and access restricted internal resources
[Mitigation] Immediately apply the official vendor security patches or import the temporary mitigation XML profile