An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
Details
CVSS Score
8.2
EPSS Score
ⓘ
99.99%
100th percentile
CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Confidence
100%
Published
Jan 12, 2024
Last Modified
Aug 4, 2026
CISA KEV
Date Added
Jan 10, 2024
Patch Due
Jan 22, 2024
Used in ransomware campaigns
Required Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.