- Vulnerability/
- https://www.bleepingcomputer.com/news/security/hackers-exploit-ivanti-ssrf-flaw-to-deploy-new-dslog-backdoor/
12/2/2024
https://www.bleepingcomputer.com/news/security/hackers-exploit-ivanti-ssrf-flaw-to-deploy-new-dslog-backdoor/: Hackers exploit Ivanti SSRF flaw to deploy new DSLog backdoor
First published: Mon Feb 12 2024(Updated: )
Credit: Bill Toulas
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ivanti Pulse Connect Secure | =9.1R14.4 | |
| Ivanti Pulse Connect Secure | =9.1R17.2 | |
| Ivanti Pulse Connect Secure | =9.1R18.3 | |
| Ivanti Pulse Connect Secure | =22.4R2.2 | |
| Ivanti Pulse Connect Secure | =22.5R1.1 | |
| Ivanti Pulse Connect Secure | =22.5R2.2 | |
| Ivanti Connect Secure | =22.5R1.1 | |
| Ivanti ZTA gateways | =22.6R1.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/bleeping-computer-rss
- source/BleepingComputer
- collector/bleeping-computer
- alias/CVE-2024-21893
- agent/references
- agent/last-modified-date
- agent/author
- agent/title
- agent/weakness
- agent/type
- agent/description
- agent/first-publish-date
- agent/severity
- agent/event
- agent/body
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- anchor-related/CVE-2024-21893
- zeroday/true
- agent/news-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ivanti
- canonical/ivanti pulse connect secure
- version/ivanti pulse connect secure/9.1r14.4
- version/ivanti pulse connect secure/9.1r17.2
- version/ivanti pulse connect secure/9.1r18.3
- version/ivanti pulse connect secure/22.4r2.2
- version/ivanti pulse connect secure/22.5r1.1
- version/ivanti pulse connect secure/22.5r2.2
- canonical/ivanti connect secure
- version/ivanti connect secure/22.5r1.1
- canonical/ivanti zta gateways
- version/ivanti zta gateways/22.6r1.3