Strix
26.1K

CVE-2024-21893

HIGHCVSS 8.2/10Actively ExploitedEPSS 100.00%

Last modified

CVE-2024-21893 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.. CISA has confirmed active exploitation in the wild. EPSS estimates a 100.00% chance of exploitation in the next 30 days.

Description

A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.

Metrics

CVSS 3.1
8.2/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS Probability
100.00%

100.0th percentile

Probability of exploitation in the next 30 days. Learn more

Exploitation Status

This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .

Weakness Enumeration

Affected Software

VendorProductVersionsUpdate
IvantiConnect Secure9.0—
IvantiConnect Secure9.1R1
IvantiConnect Secure21.9R1
IvantiConnect Secure21.12R1
IvantiConnect Secure22.1R1
IvantiConnect Secure22.2—
IvantiConnect Secure22.3R1
IvantiConnect Secure22.4R1
IvantiConnect Secure22.6—
IvantiPolicy Secure9.0—
IvantiPolicy Secure9.1—
IvantiPolicy Secure22.1R1
IvantiPolicy Secure22.2R1
IvantiPolicy Secure22.3R1
IvantiPolicy Secure22.4R1
IvantiPolicy Secure22.5R1
IvantiPolicy Secure22.6R1
IvantiNeurons For Zero-Trust AccessAll versions—
IvantiNeurons For Zero-Trust Access22.2R1
IvantiNeurons For Zero-Trust Access22.3R1
IvantiNeurons For Zero-Trust Access22.4R1
IvantiNeurons For Zero-Trust Access22.5R1
IvantiNeurons For Zero-Trust Access22.6R1

References

Timeline

Published
Last Modified
Status
Analyzed

Frequently Asked Questions

What is CVE-2024-21893?
A server-side request forgery vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) and Ivanti Neurons for ZTA allows an attacker to access certain restricted resources without authentication.
How severe is CVE-2024-21893?
CVE-2024-21893 has a CVSS score of 8.2/10 (HIGH severity). The EPSS model estimates a 100.00% probability of exploitation in the next 30 days. This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog.
How do I fix CVE-2024-21893?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2024-21893?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST