coldbraid

CVE-2021-22894 Ivanti Pulse Connect Secure

Ivanti Pulse Connect Secure Collaboration Suite contains a buffer overflow vulnerabilities that allows a remote authenticated users to execute code as the root user via maliciously crafted meeting room.

CVSS
not scored

CWE-94

On CISA’s exploited list

Ivanti Pulse Connect Secure Collaboration Suite Buffer Overflow Vulnerability

Added
2021-11-03
Federal patch deadline
2022-05-03
Ransomware use
not known