CVE-2024-21887 Ivanti Connect Secure And Policy Secure
Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in the web components of these products, which can allow an authenticated administrator to send crafted requests to execute code on affected appliances. This vulnerability can be…
- CVSS
- not scored
On CISA’s exploited list
Ivanti Connect Secure and Policy Secure Command Injection Vulnerability
- Added
- 2024-01-10
- Federal patch deadline
- 2024-01-22
- Ransomware use
- known