CVE-2024-21893KEV Β· OVERDUECWE-918ssrf

Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

High Β· published January 31, 2024

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.2. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.

947
days past CISA
deadline
CVSS v3.1
8.2
EPSS
100%
Percentile
100.0
In the wild
Confirmed
What it is

🚨 An attacker only needs to craft a specific request to gain unauthorized access to restricted resources in Ivanti Connect Secure and Policy Secure! ⚑ Think of it like a sneaky delivery person who knows how to trick the receptionist into handing over the keys to the restricted areas of a building, bypassing the security checks entirely. An attacker can exploit this vulnerability to access sensitive information or restricted resources without ever needing to authenticate, exposing critical data to unauthorized users. The potential for data breaches and unauthorized actions can lead to devastating consequences for your organization.

Put simply

Think of it like a sneaky delivery person who knows how to trick the receptionist into handing over the keys to the restricted areas of a building, bypassing the security checks entirely. This server-side request forgery (SSRF) vulnerability in the SAML component allows attackers to send crafted requests that can access protected resources without proper authentication checks.

What to do

An attacker can exploit this vulnerability to access sensitive information or restricted resources without ever needing to authenticate, exposing critical data to unauthorized users. The potential for data breaches and unauthorized actions can lead to devastating consequences for your organization. Immediately patch your Ivanti Connect Secure and Policy Secure to versions 9.x and 22.x, which contain the fix for this vulnerability. Additionally, review your security configurations to ensure that such unauthorized access is not possible in the future. You've got this! By taking these steps, you can protect your systems and keep your data safe! πŸ›‘οΈ

The record
Technical detail
CVSS v3.1
8.2 Β· HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.99999 Β· 100.0th percentile
Weakness
CWE-918 Β· Server-Side Request Forgery (SSRF)
Published
2024-01-31T23:15Z
KEV added
2024-01-31 Β· due 2024-02-02
Affected products (118)
ProductVersionsFixed in
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/connect_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/policy_secureall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
ivanti/neurons_for_zero-trust_accessall versionsβ€”
References (3)
EPSS history
Timeline
  • 31 JAN 17:51Z
    A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons…
    cvelistv5
  • 31 JAN 00:00Z
    Added to CISA KEV β€” remediate by Feb 2
    kev