Vulnerabilitycritical

Ivanti fixed a critical code execution issue in Pulse Connect Secure VPN

Security Affairsby @securityaffairsAug 6, 2021 · 16:26 UTC (Aug 6, 2021)1 min read2 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-22937 CVE-2020-8260 CVE-2020-22900 CVE-2021-22935

Tags: cve-2021-22937 cve-2020-8260 cve-2020-22900 cve-2021-22935 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-8260	Authenticated RCE in Ivanti Pulse Connect Secure admin web interface (pre-9.1R9)	7.2	96%	KEVPoC	Oct 28, 2020 KEV Nov 3, 2021
CVE-2021-22937 +1 related CVE CVE-2021-22935	A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform a file write via a maliciously crafted archive…	7.2	8%		Aug 16, 2021

From the original article

1 min read at securityaffairs.com

Security firm Ivanti addressed a critical vulnerability in its Pulse Connect Secure VPN appliances that could be exploited to execute arbitrary code with root privileges. IT firm Ivanti released security updates to address multiple vulnerabilities in its Pulse Connect Secure VPN appliances.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.