Recent SSRF Flaw in Ivanti VPN Products Undergoes Mass Exploitation

A recently disclosed server-side request forgery (SSRF) vulnerability impacting Ivanti Connect Secure and Policy Secure products has come under mass exploitation.
The Shadowserver Foundation said it observed exploitation attempts originating from more than 170 unique IP addresses that aim to establish a reverse shell, among others.
The attacks exploit CVE-2024-21893 (CVSS

addresses aim attacks connect cve cve-2024-21893 exploit exploitation flaw forgery foundation ip addresses ivanti ivanti connect secure ivanti vpn policy products request reverse reverse shell server server-side request forgery shadowserver shell ssrf under vpn vulnerability