Ivanti Connect Secure Under Attack: Uncovering Five Exploitable CVEs - XXE

3 years ago by testeronious to c/security

Overview  Recently, five CVEs have been discovered in Ivanti Connect Secure, a software product designed to offer secure remote access to corporate resources and applications. This product is currently trusted by numerous service providers and government entities. These vulnerabilities encompass authentication bypass, command injection, privilege escalation, server-side request forgery, and XML external entity issues, potentially...
security
security

@programming.dev

login for more options
2202
173
93

A community for discussion about cybersecurity, hacking, cybersecurity news, exploits, bounties etc.

Rules :

  1. All instance-wide rules apply.
  2. Keep it totally legal.
  3. Remember the human, be civil.
  4. Be helpful, don't be rude.

Icon base by Delapouite under CC BY 3.0 with modifications to add a gradient

go to feed...