CVE-2024-22024 - OpenCVE

An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker to access certain restricted resources without authentication.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction None

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Ivanti	Connect Secure Policy Secure Zero Trust Access

Configuration 1 [-]

OR	cpe:2.3:a:ivanti:connect_secure:9.1:r14.4::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r17.2::::::
	cpe:2.3:a:ivanti:connect_secure:9.1:r18.3::::::
	cpe:2.3:a:ivanti:connect_secure:22.4:r2.2::::::
	cpe:2.3:a:ivanti:connect_secure:22.5:r1.1::::::
	cpe:2.3:a:ivanti:connect_secure:22.5:r2.2::::::

Configuration 2 [-]

cpe:2.3:a:ivanti:policy_secure:22.5:r1.1:*:*:*:*:*:*

Configuration 3 [-]

cpe:2.3:a:ivanti:zero_trust_access:22.6:r1.3:*:*:*:*:*:*

No data.

References

Link	Providers
https://forums.ivanti.com/s/article/CVE-2024-22024-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US

History

No history.

MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2024-02-13T04:07:04.355Z

Updated: 2024-08-01T22:35:34.846Z

Reserved: 2024-01-04T01:04:06.574Z

Link: CVE-2024-22024

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2024-02-13T04:15:07.943

Modified: 2024-02-13T15:15:32.193

Link: CVE-2024-22024

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-22024", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "state": "PUBLISHED", "assignerShortName": "hackerone", "dateReserved": "2024-01-04T01:04:06.574Z", "datePublished": "2024-02-13T04:07:04.355Z", "dateUpdated": "2024-08-01T22:35:34.846Z"}, "containers": {"cna": {"descriptions": [{"lang": "en", "value": "An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker to access certain restricted resources without authentication."}], "affected": [{"vendor": "Ivanti", "product": "ICS", "versions": [{"version": "9.1R14.5", "status": "affected", "lessThan": "9.1R14.5", "versionType": "semver"}, {"version": "9.1R17.3", "status": "affected", "lessThan": "9.1R17.3", "versionType": "semver"}, {"version": "9.1R18.4", "status": "affected", "lessThan": "9.1R18.4", "versionType": "semver"}, {"version": "22.1R6.1", "status": "affected", "lessThan": "22.1R6.1", "versionType": "semver"}, {"version": "9.1R14.4", "status": "unaffected", "lessThan": "9.1R14.4", "versionType": "semver"}, {"version": "9.1R15.2", "status": "unaffected", "lessThan": "9.1R15.2", "versionType": "semver"}, {"version": "9.1R16.2", "status": "unaffected", "lessThan": "9.1R16.2", "versionType": "semver"}, {"version": "9.1R17.2", "status": "unaffected", "lessThan": "9.1R17.2", "versionType": "semver"}, {"version": "9.1R18.3", "status": "unaffected", "lessThan": "9.1R18.3", "versionType": "semver"}, {"version": "22.1R6.1", "status": "unaffected", "lessThan": "22.1R6.1", "versionType": "semver"}, {"version": "22.2R4.1", "status": "affected", "lessThan": "22.2R4.1", "versionType": "semver"}, {"version": "22.3R1.1", "status": "affected", "lessThan": "22.3R1.1", "versionType": "semver"}, {"version": "22.4R1.1", "status": "affected", "lessThan": "22.4R1.1", "versionType": "semver"}, {"version": "22.5R1.2", "status": "affected", "lessThan": "22.5R1.2", "versionType": "semver"}, {"version": "22.6R1.1", "status": "affected", "lessThan": "22.6R1.1", "versionType": "semver"}, {"version": "22.4R2.3", "status": "affected", "lessThan": "22.4R2.3", "versionType": "semver"}, {"version": "22.5R2.3", "status": "affected", "lessThan": "22.5R2.3", "versionType": "semver"}, {"version": "22.6R2.2", "status": "affected", "lessThan": "22.6R2.2", "versionType": "semver"}, {"version": "22.2R4.1", "status": "unaffected", "lessThan": "22.2R4.1", "versionType": "semver"}, {"version": "22.3R1", "status": "unaffected", "lessThan": "22.3R1", "versionType": "semver"}, {"version": "22.4R1.1", "status": "unaffected", "lessThan": "22.4R1.1", "versionType": "semver"}, {"version": "22.5R1.1", "status": "unaffected", "lessThan": "22.5R1.1", "versionType": "semver"}, {"version": "22.6R1.1", "status": "unaffected", "lessThan": "22.6R1.1", "versionType": "semver"}, {"version": "22.4R2.2", "status": "unaffected", "lessThan": "22.4R2.2", "versionType": "semver"}, {"version": "22.5R2.2", "status": "unaffected", "lessThan": "22.5R2.2", "versionType": "semver"}, {"version": "22.6R2.2", "status": "unaffected", "lessThan": "22.6R2.2", "versionType": "semver"}]}, {"vendor": "Ivant ", "product": "ICS", "versions": [{"version": "9.1R15.3", "status": "affected", "lessThan": "9.1R15.3", "versionType": "semver"}]}, {"vendor": "Ivanti", "product": "IPS", "versions": [{"version": "9.1R18.4", "status": "affected", "lessThan": "9.1R18.4", "versionType": "semver"}, {"version": "9.1R17.3", "status": "affected", "lessThan": "9.1R17.3", "versionType": "semver"}, {"version": "22.5R1.2", "status": "affected", "lessThan": "22.5R1.2", "versionType": "semver"}, {"version": "9.1R18.2", "status": "unaffected", "lessThan": "9.1R18.2", "versionType": "semver"}, {"version": "9.1R17.2", "status": "unaffected", "lessThan": "9.1R17.2", "versionType": "semver"}, {"version": "22.5R1.1", "status": "unaffected", "lessThan": "22.5R1.1", "versionType": "semver"}]}], "references": [{"url": "https://forums.ivanti.com/s/article/CVE-2024-22024-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US"}], "metrics": [{"cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "baseScore": 8.3, "baseSeverity": "HIGH"}}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2024-02-13T04:07:04.355Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:35:34.846Z"}, "title": "CVE Program Container", "references": [{"url": "https://forums.ivanti.com/s/article/CVE-2024-22024-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US", "tags": ["x_transferred"]}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r14.4:*:*:*:*:*:*", "matchCriteriaId": "06520C75-9326-4C21-8AD6-6DE1ED031959", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r17.2:*:*:*:*:*:*", "matchCriteriaId": "8971445A-D65F-4C0E-906F-7AC4953C5689", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:9.1:r18.3:*:*:*:*:*:*", "matchCriteriaId": "014C7627-F211-48B1-80FA-3A7F608B4F23", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:22.4:r2.2:*:*:*:*:*:*", "matchCriteriaId": "C4F6AA81-68BC-40B1-9062-DD678B52AAC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:22.5:r1.1:*:*:*:*:*:*", "matchCriteriaId": "5CF1705D-BE88-4B19-BE66-6628D8D8B688", "vulnerable": true}, {"criteria": "cpe:2.3:a:ivanti:connect_secure:22.5:r2.2:*:*:*:*:*:*", "matchCriteriaId": "49E6C8D1-612D-4C63-B3D4-D4AEE2747770", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ivanti:policy_secure:22.5:r1.1:*:*:*:*:*:*", "matchCriteriaId": "198A80DF-4BD5-4325-85FE-992324AB2166", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ivanti:zero_trust_access:22.6:r1.3:*:*:*:*:*:*", "matchCriteriaId": "E70E1C11-4209-49F0-952E-636F67187225", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) and ZTA gateways which allows an attacker to access certain restricted resources without authentication."}, {"lang": "es", "value": "Una entidad externa XML o vulnerabilidad XXE en el componente SAML de Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x) y puertas de enlace ZTA que permite a un atacante acceder a ciertos recursos restringidos sin autenticaci\u00f3n."}], "id": "CVE-2024-22024", "lastModified": "2024-02-13T15:15:32.193", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.7, "source": "support@hackerone.com", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-02-13T04:15:07.943", "references": [{"source": "support@hackerone.com", "tags": ["Vendor Advisory"], "url": "https://forums.ivanti.com/s/article/CVE-2024-22024-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US"}], "sourceIdentifier": "support@hackerone.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-611"}], "source": "nvd@nist.gov", "type": "Primary"}]}