Remote Code Execution Vulnerability in Ivanti Connect Secure Before 22.7R2.1 and Ivanti Policy Secure Before 22.7R1.1

CVE-2024-38655
Currently unrated 🤨

Key Information

Vendor
Ivanti
Vendor
CVE Published:
13 November 2024

Summary

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

Timeline

  • Vulnerability published.

Collectors

NVD Database
.