Skip to content
OpenAdvisories
High · 8.8 CVE-2024-9420 EUVD-2024-50308GHSA-q8fc-2r64-8hq5

A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a re…

Published Nov 12, 2024 · Updated Mar 13, 2025 · Assigned by ivanti

Vendor: ivanti Product: Connect Secure Product: Policy Secure Category: Network devices

Description

A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9

and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution

Affected products

VendorProductAffectedFixed
Ivanti Connect Secure — 22.7R2.3
Ivanti Policy Secure — 22.7R1.2

Advisories 2

References