High severity8.2CISA KEVNVD Advisory· Published Jan 31, 2024· Updated Aug 4, 2026

CVE-2024-21893

Description

A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

123

Ivanti/Connect Secure61 versions
cpe:2.3:a:ivanti:connect_secure:21.12:r1:*:*:*:*:*:*+ 60 more
- cpe:2.3:a:ivanti:connect_secure:21.12:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:21.9:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:22.1:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:22.1:r6:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:22.2:-:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:22.2:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:22.3:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:22.4:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:22.4:r2.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:22.6:-:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:22.6:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:22.6:r2.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:22.6:r2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:-:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r3.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r3.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r3.3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r3.5:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r4.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r4:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r5.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.0:r6.0:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r10:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r11.4:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r11.5:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r11:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r12.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r12:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r13.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r13:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r14:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r15.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r15:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r16.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r16:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r17.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r17:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r18.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r18.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r18:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:*
- (no CPE)range: 9.x, 22.x
Ivanti/Neurons For Zero Trust Access12 versions
cpe:2.3:a:ivanti:neurons_for_zero-trust_access:-:*:*:*:*:*:*:*+ 11 more
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:-:*:*:*:*:*:*:*
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.2:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.2:r4:*:*:*:*:*:*
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.2:r5:*:*:*:*:*:*
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.3:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.3:r4:*:*:*:*:*:*
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.4:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.4:r3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.5:r1.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.5:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.6:r1.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:neurons_for_zero-trust_access:22.6:r1:*:*:*:*:*:*
Ivanti/Policy Secure47 versions
cpe:2.3:a:ivanti:policy_secure:22.1:r1:*:*:*:*:*:*+ 46 more
- cpe:2.3:a:ivanti:policy_secure:22.1:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:22.1:r6:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:22.2:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:22.2:r3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:22.3:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:22.3:r3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:22.4:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:22.4:r2.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:22.4:r2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:22.5:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:22.6:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.0:-:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.0:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.0:r2.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.0:r2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.0:r3.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.0:r3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.0:r4:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:-:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r10:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r11:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r12:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r13.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r13:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r14:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r15:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r16:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r17:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r18.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r18.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r18:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r3.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r4.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r4.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r4.3:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r4:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r5:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r6:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r7:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r8.1:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r8.2:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r8:*:*:*:*:*:*
- cpe:2.3:a:ivanti:policy_secure:9.1:r9:*:*:*:*:*:*
- (no CPE)range: 9.x, 22.x
Ivanti/Neurons for ZTA gatewaysllm-fuzzy
Ivanti/ICScpe-rescue
Range: 9.1R18
Ivanti/IPSv5
Range: 9.1R18

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/CVE-2024-21888-Privilege-Escalation-for-Ivanti-Connect-Secure-and-Ivanti-Policy-SecurenvdVendor Advisory
www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

News mentions

No linked articles in our index yet.

cvss	0.533
epss	0.080
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.060