A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2023-12-14T01:56:44.867Z

Updated: 2024-08-02T19:01:35.464Z

Reserved: 2023-08-31T01:00:11.770Z

Link: CVE-2023-41719

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-12-14T02:15:12.460

Modified: 2024-11-21T08:21:32.450

Link: CVE-2023-41719

cve-icon Redhat

No data.