Ivanti warns of new Connect Secure zero-day exploited in attacks

Today, Ivanti warned of two more vulnerabilities impacting Connect Secure, Policy Secure, and ZTA gateways, one of them a zero-day bug already under active exploitation.
The zero-day flaw (CVE-2024-21893) is a server-side request forgery vulnerability in the gateways' SAML component that enables attackers to bypass authentication and access restricted resources on vulnerable devices.
A second flaw (CVE-2024-21888) in the gateways' web component allows threat actors to escalate privileges to those of an administrator.
"As part of our ongoing investigation into …

access attackers attacks authentication bug bypass connect cve cve-2024-21893 cybersecurity exploitation exploited flaw forgery gateways ivanti policy request resources restricted saml server server-side request forgery today under vulnerabilities vulnerability zero-day zero-day bug zero-day flaw zta