Scans for Ivanti Connect "Secure" VPN Vulnerability (CVE-2023-46805, CVE-2024-21887), (Tue, Jan 16th)

Last week, Volexity published a blog describing two vulnerabilities in Ivanti’s Connect “Secure” VPN [1]. These vulnerabilities have been exploited in limited, targeted attacks. At this point, Ivanti released a configuration workaround but no patch for this vulnerability. The configuration can be applied in the form of an encrypted XML file.

Article Link: https://isc.sans.edu/diary/rss/30562

1 post - 1 participant

Read full topic

attacks blog can configuration connect cve cve-2023-46805 cve-2024-21887 exploited ivanti patch point scans targeted attacks volexity vpn vulnerabilities vulnerability week workaround