CoreCVE
Back

HIGH

Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker to bypass restrictions

Published Dec 10, 2024

Description

Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker to bypass restrictions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-602

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner ivanti
Published Dec 10, 2024
Updated Dec 10, 2024
Reserved Oct 10, 2024
Link CVE-2024-9844

CISA Vulnrichment

Updated Dec 10, 2024

NVD

Status Analyzed
Modified Jun 17, 2026
Link CVE-2024-9844

Red Hat

No data

ENISA EUVD

Assigner ivanti
Published Dec 10, 2024
Updated Dec 10, 2024
Link EUVD-2024-50403

GitHub

No data