VYPR
High severity8.2CISA KEVNVD Advisory· Published Jan 12, 2024· Updated Aug 4, 2026

CVE-2023-46805

CVE-2023-46805

Description

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

85
  • cpe:2.3:a:ivanti:connect_secure:22.1:r1:*:*:*:*:*:*+ 43 more
    • cpe:2.3:a:ivanti:connect_secure:22.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.2:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.2:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.3:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.4:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.4:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.5:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.6:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.6:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.6:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r12.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r12:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r13.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r13:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r14:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r15.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r15:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r16.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r16:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r17.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r17:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:policy_secure:22.1:r1:*:*:*:*:*:*+ 37 more
    • cpe:2.3:a:ivanti:policy_secure:22.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.2:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.2:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.3:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.3:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.4:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.4:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.4:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.5:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.5:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.6:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r10:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r11:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r12:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r13.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r13:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r14:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r15:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r16:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r17:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r18:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r3.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r8.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r8.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r8:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:9.1:r9:*:*:*:*:*:*
    • (no CPE)
  • Ivanti/ICSllm-fuzzy2 versions
    9.x, 22.x+ 1 more
    • (no CPE)range: 9.x, 22.x
    • (no CPE)range: 9.1R18
  • Ivanti/IPSv5
    Range: 9.1R18

Patches

Vulnerability mechanics

References

3

News mentions

3