PT-2023-8231 · Ivanti · Ivanti Policy Secure+1

Published 2023-01-24 · Updated 2026-06-24 · CVE-2024-21887

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions 9.x Ivanti Connect Secure versions 22.x Ivanti Policy Secure versions 9.x Ivanti Policy Secure versions 22.x

Description A command injection issue exists in the web components of the software. This occurs because the system fails to properly neutralize special elements used in operating system commands. An authenticated administrator can exploit this by sending specially crafted requests to execute arbitrary commands on the appliance.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2024-00249

CVE-2024-21887

Affected Products

Ivanti Connect Secure

Ivanti Policy Secure

References · 474

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanti_connect_secure_rce_cve_2024_21893.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanti_connect_secure_rce_cve_2023_46805.rb · Exploit
• 🔥 https://github.com/Chocapikk/CVE-2024-21887 · Exploit
• 🔥 https://github.com/duy-31/CVE-2023-46805_CVE-2024-21887 · Exploit
• 🔥 https://github.com/seajaysec/Ivanti-Connect-Around-Scan · Exploit
• 🔥 https://github.com/yoryio/CVE-2023-46805_CVE-2024-21887_Scanner · Exploit
• 🔥 https://github.com/oways/ivanti-CVE-2024-21887 · Exploit
• 🔥 https://github.com/raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887 · Exploit
• 🔥❌ https://github.com/rxwx/pulse-meter · Exploit, Deleted
• 🔥 http://packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html · Exploit
• 🔥❌ https://github.com/TheRedDevil1/Check-Vulns-Script · Exploit, Deleted
• https://bdu.fstec.ru/vul/2024-00249 · Security Note
• https://osv.dev/vulnerability/CVE-2024-21887 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-21887 · Security Note
• https://forums.ivanti.com/s/article/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US · Vendor Advisory