H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2023-46805

Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.

Vulnerability
TypeVulnerability
External ID—
First seen2024-01-10
Last seen2024-01-10

Confidence

—

Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productIvanti Connect Secure and Policy Secure
Added2024-01-10
Due date2024-01-22
11 recorded

Relationships

mitigates
from Remediate CVE-2023-46805
Mitigation
related-to
to Adversary in the Middle (AiTM)
Technique
related-to
to Authentication Abuse
Technique
related-to
to Authentication Bypass
Technique
related-to
to Exploiting Trust in Client
Technique
related-to
to Fake the Source of Data
Technique
related-to
to Identity Spoofing
Technique
related-to
to Session Hijacking
Technique
related-to
to Token Impersonation
Technique
related-to
to Upload a Web Shell to a Web Server
Technique
related-to
to Utilizing REST's Trust in the System Resource to Obtain Sensitive Data
Technique
2 external

References

nvd
CVE-2023-46805
open
cwe
CWE-287
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance