CVE-2023-46805

🔥 Known Exploited (CISA KEV)HIGH

8.2

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-01-12

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

Affected Platforms (CPE)

📦

Ivanti

Connect Secure

= 9.0= 9.1= 22.1= 22.2= 22.3= 22.4= 22.5= 22.6

📦

Ivanti

Policy Secure

= 9.0= 9.1= 22.1= 22.2= 22.3= 22.4= 22.5= 22.6

References & Advisories

🔗 http://packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html

🔗 https://forums.ivanti.com/s/article/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US