Ivanti Connect Secure VPN CVE
Two vulnerabilities disclosed together for Ivanti Connect Secure and Ivanti Policy Secure — CVE-2023-46805 (authentication bypass, CVSS 8.2) and CVE-2024-21887 (command injection, CVSS 9....
The VPN gateway product line — Ivanti Connect Secure and Ivanti Policy Secure — is the subject of this briefing.
Ivanti Connect Secure (ICS) and Ivanti Policy Secure are VPN appliances and associated client applications used by organizations to provide secure remote access to internal networks. These products are the direct descendants of the legacy Pulse Connect Secure product line, which Ivanti acquired and rebranded.
This vulnerability disclosure is unrelated to a separate set of wide-ranging vulnerabilities disclosed roughly a month earlier in Ivanti's mobile device management suite, Avalanche. However, the Avalanche disclosure had already drawn increased attention from threat actors toward Ivanti's broader product offerings, making the VPN appliance line an attractive follow-on target.
Sign in to read this course
A free account unlocks all 514 courses. 20 are readable without one.
What's inside
10 sections- 1 Table of Contents
- 2 Module 1: Ivanti Connect Secure and Policy Secure Platform Background
- 3 Module 2: The Vulnerability Chain — Authentication Bypass and Command Injection
- 4 Module 3: CVSS Scoring and Affected Versions
- 5 Module 4: Active Exploitation and Threat Intelligence
- 6 Module 5: Risk Assessment for Affected Organizations
- 7 Module 6: Detection and Forensic Preservation
- 8 Module 7: Remediation and Recovery Workflow
- 9 Module 8: Ongoing Security Practices and Incident Response Follow-Up
- 10 Summary
More Vulnerability Briefings courses
View all 30Apache Commons Text Vulnerability: What You Should Know
Because the library is freely available, widely trusted, and saves developers from writing boilerplate text-processing code, it has been incorporated into a very large number of Java-base...
Atlassian Vulnerability: What You Should Know
This document covers a group of critical advisories describing a series of Remote Code Execution (RCE) vulnerabilities in Atlassian products. The vulnerabilities span multiple products —...
Authentication Bypass at the Security Edge: What You Should Know
Once all required configuration changes were made, attackers established SSL VPN tunnels to the affected devices using the newly created or hijacked accounts.
Next.js Authentication Bypass Vulnerability: What You Should Know
Next.js is a React-based web development framework created and maintained by Vercel. It is widely used to build fast, scalable, and SEO-friendly web applications.
Breaking! React & Next.js Hit by CVSS 10.0 Bug
Every so often, a vulnerability drops that cuts through the noise — not because of the hype, but because it touches a large part of the modern web stack. CVE-2025-55182 is one of those.
ConnectWise ScreenConnect Vulnerability - What You Should Know
Critical security advisory covering CVE-2024-1709 (CVSS 10.0) and CVE-2024-1708 (CVSS 8.4) — authentication bypass and path traversal vulnerabilities in ConnectWise ScreenConnect.
Interested in this course?
Contact us to book it or get a custom training plan for your team.