CVE-2024-9844

No fix known EPSS <1%CVSS 7.1

Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticated attacker to bypass restrictions.

Published 2024-12-10 · CVE record · OSV

Products: ivanti connect_secure