Remote Code Execution Vulnerability in Ivanti Connect Secure Before 22.7R2.1 and Ivanti Policy Secure Before 22.7R1.1
CVE-2024-38655
7.2HIGH
What is CVE-2024-38655?
An argument injection vulnerability exists within Ivanti Connect Secure and Ivanti Policy Secure that allows a remote authenticated attacker with administrative privileges to execute arbitrary code. This flaw impacts specific versions prior to 22.7R2.1 and 9.1R18.9 for Connect Secure, and versions prior to 22.7R1.1 and 9.1R18.9 for Policy Secure. Exploitation can lead to severe consequences, including unauthorized access to sensitive system functionalities.