CVE-2023-46805

2024-01-1217:02:16

hackerone

www.cve.org

ivanti

ics

web

authentication

bypass

vulnerability

remote attacker

restricted resources

control checks

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

AI Score

Confidence

High

EPSS

0.957

Percentile

99.5%

JSON

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "vendor": "Ivanti",
    "product": "ICS",
    "versions": [
      {
        "version": "9.1R18",
        "status": "affected",
        "lessThanOrEqual": "9.1R18",
        "versionType": "semver"
      },
      {
        "version": "22.6R2",
        "status": "affected",
        "lessThanOrEqual": "22.6R2",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "vendor": "Ivanti",
    "product": "IPS",
    "versions": [
      {
        "version": "9.1R18",
        "status": "affected",
        "lessThanOrEqual": "9.1R18",
        "versionType": "semver"
      },
      {
        "version": "22.6R1",
        "status": "affected",
        "lessThanOrEqual": "22.6R1",
        "versionType": "semver"
      }
    ]
  }
]

References

packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html

forums.ivanti.com/s/article/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US