CVE-2023-46805, CVE-2024-21887: Zero-Day Vulnerabilities Exploited in Ivanti Connect Secure and Policy Secure Gateways

Two zero-day vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure have been exploited in the wild, with at least one attack attributed to nation-state actors.

Background

On January 10, Ivanti released a security advisory for two zero-day vulnerabilities that were exploited in-the-wild in limited, targeted attacks.

Both flaws were exploited as part …

advisory attack attacks connect cve exploited ivanti january nation nation-state actors policy security security advisory state targeted attacks vulnerabilities zero-day zero-day vulnerabilities