high8.8
CVE-2024-9420
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated a…
Impact
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Connect Secure | before 9.1 from 21.9 before 22.7 Versions 9.1, 22.7 |
| Ivanti | Policy Secure | before 22.7 Version 22.7 |