CVE-2023-41719: High severity ivanti pulse connect secure vulnerability
Published Dec 14, 2023
·Updated
A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker impersonating an administrator may craft a specific web request which may lead to remote code execution.
Affected Software
53 affected components
Ivanti Connect Secure=21.9-r1
Ivanti Connect Secure=21.12-r1
Ivanti Connect Secure=22.1-r1
Ivanti Connect Secure=22.1-r6
Ivanti Connect Secure=22.2-r1
Ivanti Connect Secure=22.3-r1
Ivanti Connect Secure=22.4-r1
Ivanti Connect Secure=22.5-r1.1
Ivanti Connect Secure=22.5-r2.1
Ivanti Connect Secure=22.6
Ivanti Connect Secure=22.6-r1
Ivanti Connect Secure=9.1-r1
Ivanti Connect Secure=9.1-r10
Ivanti Connect Secure=9.1-r10.2
Ivanti Connect Secure=9.1-r11
Ivanti Connect Secure=9.1-r11.1
Ivanti Connect Secure=9.1-r11.3
Ivanti Connect Secure=9.1-r11.4
Ivanti Connect Secure=9.1-r11.5
Ivanti Connect Secure=9.1-r12
Ivanti Connect Secure=9.1-r12.1
Ivanti Connect Secure=9.1-r12.2
Ivanti Connect Secure=9.1-r13
Ivanti Connect Secure=9.1-r13.1
Ivanti Connect Secure=9.1-r14
Ivanti Connect Secure=9.1-r14.4
Ivanti Connect Secure=9.1-r15
Ivanti Connect Secure=9.1-r15.2
Ivanti Connect Secure=9.1-r16
Ivanti Connect Secure=9.1-r16.1
Ivanti Connect Secure=9.1-r17
Ivanti Connect Secure=9.1-r17.1
Ivanti Connect Secure=9.1-r17.2
Ivanti Connect Secure=9.1-r18
Ivanti Connect Secure=9.1-r18.1
Ivanti Connect Secure=9.1-r18.2
Ivanti Connect Secure=9.1-r18.3
Ivanti Connect Secure=9.1-r2
Ivanti Connect Secure=9.1-r3
Ivanti Connect Secure=9.1-r4
Ivanti Connect Secure=9.1-r4.1
Ivanti Connect Secure=9.1-r4.2
Ivanti Connect Secure=9.1-r4.3
Ivanti Connect Secure=9.1-r5
Ivanti Connect Secure=9.1-r6
Ivanti Connect Secure=9.1-r7
Ivanti Connect Secure=9.1-r8
Ivanti Connect Secure=9.1-r8.1
Ivanti Connect Secure=9.1-r8.2
Ivanti Connect Secure=9.1-r8.4
Ivanti Connect Secure=9.1-r9
Ivanti Connect Secure=9.1-r9.1
Ivanti Connect Secure=9.1-r9.2
Event History
Dec 14, 2023
CVE Published
01:56 AM
Data Sourced
01:56 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2023-41719?
CVE-2023-41719 is classified as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2023-41719?
To fix CVE-2023-41719, upgrade to Ivanti Connect Secure version 22.6R2 or later.
3
Who is affected by CVE-2023-41719?
All versions of Ivanti Connect Secure below 22.6R2 are affected by CVE-2023-41719.
4
What potential impact can CVE-2023-41719 have on my system?
CVE-2023-41719 can allow an attacker to impersonate an administrator and execute arbitrary code remotely.
5
Is there a workaround for CVE-2023-41719?
There are no specific workarounds recommended for CVE-2023-41719; upgrading to the latest version is the best mitigation.