The Hacker News - Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways
Ivanti has alerted customers of yet another high-severity security flaw in its Connect Secure, Policy Secure, and ZTA gateway devices that could allow attackers to bypass authentication. The issue, tracked as CVE-2024-22024, is rated 8.3 out of 10 on the CVSS scoring system. "An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti
from The Hacker News https://thehackernews.com/2024/02/warning-new-ivanti-auth-bypass-flaw.html
from The Hacker News https://thehackernews.com/2024/02/warning-new-ivanti-auth-bypass-flaw.html
Comments
Post a Comment