Unrated severityNVD Advisory· Published Dec 14, 2023· Updated Aug 2, 2024

CVE-2023-41719

Description

A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution.

Affected products

Ivanti/Connect Securellm-fuzzy2 versions
<22.6R2+ 1 more
- (no CPE)range: <22.6R2
- (no CPE)range: 22.6.1

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/Security-patch-release-Ivanti-Connect-Secure-22-6R2-and-22-6R2-1mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000