CVE-2024-9420

No fix known EPSS 1%CVSS 8.8

A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution

Published 2024-11-12 · CVE record · OSV

Products: ivanti connect_secure, ivanti policy_secure