CVE-2024-37404 - Vulnerability Details - OpenCVE

Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.79423.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Ivanti	Connect Secure Policy Secure

No data.

No data.

No data.

References

Link	Providers
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-and-Policy-Secure-CVE-2024-37404

History

Mon, 21 Oct 2024 18:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Ivanti Ivanti connect Secure Ivanti policy Secure
CPEs		cpe:2.3:a:ivanti:connect_secure:::::::: cpe:2.3:a:ivanti:policy_secure::::::::
Vendors & Products		Ivanti Ivanti connect Secure Ivanti policy Secure
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Fri, 18 Oct 2024 23:15:00 +0000

Type	Values Removed	Values Added
Description		Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution.
References		https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-and-Policy-Secure-CVE-2024-37404
Metrics		cvssV3_0 `{'score': 9.1, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: hackerone

Published: 2024-10-18T23:06:49.502Z

Updated: 2024-10-21T17:22:47.072Z

Reserved: 2024-06-08T01:04:07.093Z

Link: CVE-2024-37404

Vulnrichment

Updated: 2024-10-21T17:22:36.364Z

NVD

Status : Awaiting Analysis

Published: 2024-10-18T23:15:03.580

Modified: 2024-10-21T17:10:22.857

Link: CVE-2024-37404

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-37404", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "state": "PUBLISHED", "assignerShortName": "hackerone", "dateReserved": "2024-06-08T01:04:07.093Z", "datePublished": "2024-10-18T23:06:49.502Z", "dateUpdated": "2024-10-21T17:22:47.072Z"}, "containers": {"cna": {"descriptions": [{"lang": "en", "value": "Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution."}], "affected": [{"defaultStatus": "unaffected", "vendor": "Ivanti", "product": "Connect Secure", "versions": [{"version": "22.7R2.1", "status": "affected", "lessThan": "22.7R2.1", "versionType": "custom"}, {"version": "9.1R18.9", "status": "affected", "lessThan": "9.1R18.9", "versionType": "custom"}]}, {"defaultStatus": "unaffected", "vendor": "Ivanti", "product": "Policy Secure", "versions": [{"version": "22.7R1.1", "status": "affected", "lessThan": "22.7R1.1", "versionType": "custom"}]}], "references": [{"url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-and-Policy-Secure-CVE-2024-37404"}], "metrics": [{"cvssV3_0": {"version": "3.0", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "baseScore": 9.1, "baseSeverity": "CRITICAL"}}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2024-10-18T23:06:49.502Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-noinfo Not enough information"}]}], "affected": [{"vendor": "ivanti", "product": "connect_secure", "cpes": ["cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThan": "22.7r2.1", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "9.1r18.9", "versionType": "custom"}]}, {"vendor": "ivanti", "product": "policy_secure", "cpes": ["cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThan": "22.7r1.1", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-21T17:17:52.468911Z", "id": "CVE-2024-37404", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-21T17:22:47.072Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-37404", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-21T17:17:52.468911Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*"], "vendor": "ivanti", "product": "connect_secure", "versions": [{"status": "affected", "version": "0", "lessThan": "22.7r2.1", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "9.1r18.9", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"cpes": ["cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:*"], "vendor": "ivanti", "product": "policy_secure", "versions": [{"status": "affected", "version": "0", "lessThan": "22.7r1.1", "versionType": "custom"}], "defaultStatus": "unaffected"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-noinfo Not enough information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-21T17:22:36.364Z"}}], "cna": {"metrics": [{"cvssV3_0": {"version": "3.0", "baseScore": 9.1, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H"}}], "affected": [{"vendor": "Ivanti", "product": "Connect Secure", "versions": [{"status": "affected", "version": "22.7R2.1", "lessThan": "22.7R2.1", "versionType": "custom"}, {"status": "affected", "version": "9.1R18.9", "lessThan": "9.1R18.9", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Ivanti", "product": "Policy Secure", "versions": [{"status": "affected", "version": "22.7R1.1", "lessThan": "22.7R1.1", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-and-Policy-Secure-CVE-2024-37404"}], "descriptions": [{"lang": "en", "value": "Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution."}], "providerMetadata": {"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "shortName": "hackerone", "dateUpdated": "2024-10-18T23:06:49.502Z"}}}, "cveMetadata": {"cveId": "CVE-2024-37404", "state": "PUBLISHED", "dateUpdated": "2024-10-21T17:22:47.072Z", "dateReserved": "2024-06-08T01:04:07.093Z", "assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1", "datePublished": "2024-10-18T23:06:49.502Z", "assignerShortName": "hackerone"}, "dataVersion": "5.1"}