Medium WID-SEC-2023-3114 3 CVEs

Ivanti Connect Secure: Mehrere Schwachstellen

Published Dec 11, 2023 · Updated Dec 11, 2023 · de-DE

Vendor: ivanti Product: Connect Secure < 22.6R2

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Ivanti Connect Secure ausnutzen, um einen Denial of Service Angriff durchzuführen seine Rechte zu erweitern oder Code auszuführen.

Product

Connect Secure bietet TLS- und mobile VPN-Lösungen.

Vulnerabilities 3

High 7.5

CVE-2023-39340

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker can send a specific requ…

ivanti Connect Secure Network devices

Dec 16, 2023
High 7.2

CVE-2023-41719

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an adminis…

ivanti Connect Secure Network devices

Dec 14, 2023
High 7.0

CVE-2023-41720

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Iv…

ivanti Connect Secure Network devices

Dec 14, 2023

Revision history

2023-12-11 #1
Initiale Fassung

References

Ivanti Connect Secure Security patch release vom 2023-12-11
https://forums.ivanti.com/s/article/Security-patch-release-Ivanti-Connect-Secure-22-6R2-and-22-6R2-1?language=en_US