An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 9.1R14.5, 9.1R17.3, 9.1R18.4, 22.1R6.1, 22.2R4.1, and 8 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- 1 proof of concept on GitHub, 1 Nuclei template
- Exploitation: poc
- Automatable: yes
- Technical impact: partial
Summary
An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker to access certain restricted resources without authentication.
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: poc · Automatable: yes · Technical impact: partial
- Record last updated
- EPSS reached 10%
FIRST estimates at least a 10% chance of exploitation in the next 30 days
Affected versions
- Ivanti ICS
From 9.1R14.5 · fixed in 9.1R14.5; From 9.1R17.3 · fixed in 9.1R17.3; From 9.1R18.4 · fixed in 9.1R18.4; From 22.1R6.1 · fixed in 22.1R6.1; From 22.2R4.1 · fixed in 22.2R4.1; From 22.3R1.1 · fixed in 22.3R1.1; From 22.4R1.1 · fixed in 22.4R1.1; From 22.5R1.2 · fixed in 22.5R1.2; From 22.6R1.1 · fixed in 22.6R1.1; From 22.4R2.3 · fixed in 22.4R2.3; From 22.5R2.3 · fixed in 22.5R2.3; From 22.6R2.2 · fixed in 22.6R2.2
- Ivant ICS
From 9.1R15.3 · fixed in 9.1R15.3
- Ivanti IPS
From 9.1R18.4 · fixed in 9.1R18.4; From 9.1R17.3 · fixed in 9.1R17.3; From 22.5R1.2 · fixed in 22.5R1.2