VDB
WID-SEC-W-2024-0325
WID-SEC-W-2024-0325
PUBLISHED
Record from circl · Published February 8, 2024
Connect Secure bietet TLS- und mobile VPN-Lösungen. Ivanti Policy Secure ist eine Network Access Control (NAC) Lösung.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Ivanti Connect Secure < 22.5R1.2 | ||
| Ivanti Connect Secure < 22.6R2.2 | ||
| Ivanti Policy Secure < 9.1R17.3 | ||
| Ivanti Connect Secure < 22.5R2.3 | ||
| Ivanti Policy Secure < 9.1R18.4 | ||
| Ivanti Connect Secure < 9.1R14.5 | ||
| Ivanti Policy Secure < 22.5R1.2 | ||
| Ivanti Connect Secure < 22.4R2.3 | ||
| Ivanti Connect Secure < 9.1R18.4 | ||
| Ivanti Connect Secure < 9.1R17.3 |
Timeline
- Feb 8, 2024 CVE Published
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln WID-SEC-W-2024-0325
vulnetix vdb fixes WID-SEC-W-2024-0325
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/WID-SEC-W-2024-0325/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-0325 advisory
- https://www.ivanti.com/blog/security-update-for-ivanti-connect-secure-and-ivanti-policy-secure-gateways-282024 url
- https://forums.ivanti.com/s/article/CVE-2024-22024-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US url
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-0325.json advisory