2024年2月10日星期六

Ivanti Products Security Restriction Bypass Vulnerability

Release Date: 9 Feb 2024

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

TYPE: Networks OS

A vulnerability has been identified in Ivanti Products. A remote attacker could exploit this vulnerability to trigger security restriction bypass on the targeted system.


Impact

  • Security Restriction Bypass

System / Technologies affected

  • Ivanti Connect Secure version 9.1R14.4
  • Ivanti Connect Secure version 9.1R17.2
  • Ivanti Connect Secure version 9.1R18.3
  • Ivanti Connect Secure version 22.4R2.2
  • Ivanti Connect Secure version 22.5R1.1
  • Ivanti Policy Secure version 22.5R1.1
  • ZTA version 22.6R1.3

Solutions

Before installation of the software, please visit the vendor web-site for more details.

 

Apply fixes issued by the vendor:


Vulnerability Identifier


Source


Related Link

沒有留言:

發佈留言

思科產品多個漏洞

思科產品多個漏洞 於思科產品發現多個漏洞。遠端攻擊者可利用這些漏洞,於目標系統觸發阻斷服務狀況,資料篡改及繞過保安限制。 影響 阻斷服務 繞過保安限制 篡改 受影響之系統或技術 Cisco IOS Cisco IOS XE 請參考供應商發佈的連結以了解受影響的版本: https:...