VDB
CVE-2024-22024
CVE-2024-22024
PUBLISHED
KEV
Connect Secure bietet TLS- und mobile VPN-Lösungen. Ivanti Policy Secure ist eine Network Access Control (NAC) Lösung.
EPSS 94.72% · 99.9th percentile
Risk Scores
EPSS Score
94.72%
99.9th percentile
Timeline
- CVE Published
- Jan 20, 1970 Nuclei Template
- Jan 20, 1970 Fix Commit
- Mar 9, 2023 CrowdSec Sighting
- Apr 5, 2023 CrowdSec Sighting
- Apr 27, 2023 CrowdSec Sighting
- Aug 10, 2023 CrowdSec Sighting
- Jan 10, 2024 PoC Published
- Feb 6, 2024 VulnCheck KEV Exploitation
- Feb 9, 2024 VulnCheck KEV Exploitation
- Feb 9, 2024 PoC Published
- Feb 9, 2024 PoC Published
References
- Nuclei Template exploit
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0325.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0325 advisory
- https://forums.ivanti.com/s/article/CVE-2024-22024-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US advisory
- https://www.ivanti.com/blog/security-update-for-ivanti-connect-secure-and-ivanti-policy-secure-gateways-282024 advisory