CVE-2024-21887 — Ivanti Connect Secure Command Injection
Command injection chained with an auth-bypass (CVE-2023-46805) for unauthenticated RCE.
Tags: rce, command-injection, ivanti, chained
- Product
- Ivanti Connect Secure
- Severity
- critical (CVSS 9.1)
- Published / added
- 2024-01
- Signals
- CISA KEV