Vulnerabilitycritical

Ivanti vows to transform its security operating model, reveals new vulnerabilities

Help Net Securityby @zeljkazorzApr 18, 2024 · 11:48 UTC (Apr 18, 2024)2 min read1 · 1 read

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-21894 CVE-2024-22053 CVE-2024-22052 CVE-2024-22023

Tags: cve-2024-21894 cve-2024-22053 cve-2024-22052 cve-2024-22023 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-21894 +3 related CVEs CVE-2024-22053 CVE-2024-22052 CVE-2024-22023	A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send…	9.8 group max	19%		Apr 4, 2024

From the original article

2 min read at helpnetsecurity.com

Ivanti has released patches for new DoS vulnerabilities affecting Ivanti Connect Secure (SSL VPN solution) and Ivanti Policy Secure (NAC solution), some of which could also lead to execution of arbitrary code or information disclosure.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.