CVE-2024-29205: High severity Ivanti Connect Secure vulnerability
An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a remote unauthenticated attacker to send specially crafted requests in-order-to cause service disruptions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29205?
CVE-2024-29205 is classified as a high severity vulnerability due to its potential for remote exploitation leading to service disruptions.
How do I fix CVE-2024-29205?
To mitigate CVE-2024-29205, update Ivanti Connect Secure and Ivanti Policy Secure to the latest available versions that address this vulnerability.
Which versions of Ivanti software are affected by CVE-2024-29205?
CVE-2024-29205 affects Ivanti Connect Secure and Ivanti Policy Secure versions 9.x and 22.x.
What type of attack does CVE-2024-29205 enable?
CVE-2024-29205 allows a remote unauthenticated attacker to send specially crafted requests causing service disruptions.
Is user authentication required to exploit CVE-2024-29205?
No, CVE-2024-29205 can be exploited by a remote unauthenticated attacker.