CVE-2023-46805

Timeline

Detection, updates, and resolution for this record.

1. Jan 10, 2024 · Catalog

   Detected

   Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.

2. Jan 10, 2024 · CISA KEV

   Known exploited

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

3. Jan 22, 2024 · CISA KEV

   Remediation due

   Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

4. Oct 1, 2026 · Catalog

   Updated

   Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.

Affected

• cpe ivanti/connect secure9.0
• cpe ivanti/connect secure9.1
• vendor Ivanti Connect Secure and Policy Secureversion unspecified

Sources

• CISA KEVCVE-2023-46805

  Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.

  cisa.gov
• CVE.orgCVE-2023-46805

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2023-46805

  30-day exploitation probability 100.0%

  first.org
• Metasploit Modulesexploit_linux/http/ivanti_connect_secure_rce_cve_2023_46805

  Public module reference (excellent). Module source is not copied into this catalog.

  rapid7.com
• Metasploit Modulesexploit_linux/http/ivanti_connect_secure_rce_cve_2024_21893

  Public module reference (excellent). Module source is not copied into this catalog.

  rapid7.com
• NIST NVDCVE-2023-46805

  An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

  nvd.nist.gov
• Packet Storm Securityhttp://packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html

  Packet Storm link already published on the finding.

  packetstormsecurity.com

References

• Exploit · packetstormsecurity.com
• Vendor Advisory · forums.ivanti.com
• CISA note · forums.ivanti.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov