VDB
CVE-2024-9844
CVE-2024-9844
PUBLISHED
Es existiert eine Schwachstelle in Ivanti Connect Secure. Unzureichende serverseitige Kontrollen im Secure Application Manager sind die Ursache dieses Problems. Ein entfernter, authentisierter Angreifer kann das ausnutzen, um Sicherheitsvorkehrungen zu umgehen.
EPSS 0.44% · 63.7th percentile
Risk Scores
EPSS Score
0.44%
63.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | Ivanti Connect Secure <22.7R2.4 |
Timeline
- Dec 10, 2024 CVE Published
- Dec 10, 2024 PoC Published
- Dec 10, 2024 CVE Updated
- Dec 11, 2024 EPSS Score
- Dec 24, 2024 PoC Published
- Dec 28, 2024 EPSS Score
- Jan 13, 2025 EPSS Score
- Jan 30, 2025 EPSS Score
- Mar 5, 2025 EPSS Score
- Mar 7, 2025 Coalition ESS Score
- Mar 17, 2025 EPSS Score
- Mar 21, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3680.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3680 advisory
- https://forums.ivanti.com/s/article/December-2024-Security-Advisory-Ivanti-Connect-Secure-ICS-and-Ivanti-Policy-Secure-IPS-Multiple-CVEs?language=en_US advisory