CVE-2024-38656: Critical severity ivanti pulse connect secure vulnerability
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 and 9.1R18.9 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-38656?
CVE-2024-38656 is considered critical due to its remote code execution capabilities.
How do I fix CVE-2024-38656?
To mitigate CVE-2024-38656, upgrade Ivanti Connect Secure and Ivanti Policy Secure to the latest patched versions.
What versions are affected by CVE-2024-38656?
CVE-2024-38656 affects Ivanti Connect Secure versions before 22.7R2.2 and 9.1R18.9, as well as Ivanti Policy Secure versions before 22.7R1.2 and 9.1R18.9.
Who can exploit CVE-2024-38656?
A remote authenticated attacker with admin privileges can exploit CVE-2024-38656 to execute malicious code.
What is the impact of CVE-2024-38656?
The impact of CVE-2024-38656 can lead to unauthorized remote code execution on affected systems.