CVE-2023-46805KEV Β· OVERDUECWE-287

Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

High Β· published January 12, 2024

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.2. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.

1006
days past CISA
deadline
CVSS v3.1
8.2
EPSS
100%
Percentile
100.0
In the wild
Confirmed
What it is

🚨 An authentication bypass leaves your front door wide open! πŸšͺ Remote attackers can access restricted resources in Ivanti ICS versions 9.x and 22.x like a courier who never checks IDs! πŸ”₯ Think of it like a restaurant where anyone can walk into the kitchen without a reservation β€” just because the door was left ajar. This vulnerability lets attackers sneak past security checks, gaining access to sensitive areas they shouldn’t be in. An attacker exploiting this vulnerability can access restricted areas of your system, potentially exposing sensitive data or critical configuration settings. This kind of mishap can lead to unauthorized changes, data leaks, or severe disruptions in service β€” all absolutely devastating for any organization!

Put simply

Think of it like a restaurant where anyone can walk into the kitchen without a reservation β€” just because the door was left ajar. This vulnerability lets attackers sneak past security checks, gaining access to sensitive areas they shouldn’t be in. This flaw allows remote attackers to bypass authentication controls in the web component of Ivanti ICS and Ivanti Policy Secure, granting them access to resources without proper authorization checks.

What to do

An attacker exploiting this vulnerability can access restricted areas of your system, potentially exposing sensitive data or critical configuration settings. This kind of mishap can lead to unauthorized changes, data leaks, or severe disruptions in service β€” all absolutely devastating for any organization! Update to the latest version immediately to patch this vulnerability. Ensure that your security checks are properly configured, and review your access controls for any gaps that could be exploited. Regular audits can also help catch any lurking issues. You've got this! Stay vigilant, follow these steps, and keep your systems secure! πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
8.2 Β· HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.99986 Β· 100.0th percentile
Weakness
CWE-287 Β· Improper Authentication
Published
2024-01-12T22:15Z
KEV added
2024-01-10 Β· due 2024-01-22
Affected products (81)
ProductVersionsFixed in
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
References (5)
EPSS history
Timeline
  • 12 JAN 17:02Z
    An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted…
    cvelistv5
  • 10 JAN 00:00Z
    Added to CISA KEV β€” remediate by Jan 22
    kev