Description
Ivanti Connect Secure和Ivanti Policy Secure存在身份验证绕过和命令注入漏洞，此漏洞是由于在特定接口，未对用户的身份和输入的内容进行合理的验证所导致的。
Ivanti 身份验证绕过及命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://isecurity.huawei.com/sec/web/viewAlert.do?id=2481
https://www.reddit.com/r/sysadmin/comments/193ki7n/active_exploitation_of_two_zeroday/?tl=zh-hans
https://blog.cloudflare.com/zh-cn/how-cloudflares-ai-waf-proactively-detected-ivanti-connect-secure-critical-zero-day-vulnerability/
https://x.threatbook.com/v5/article?threatInfoID=100828
https://blog.nsfocus.net/%E3%80%90%E6%BC%8F%E6%B4%9E%E9%80%9A%E5%91%8A%E3%80%91ivanti-endpoint-manager-mobile%E8%BA%AB%E4%BB%BD%E9%AA%8C%E8%AF%81%E7%BB%95%E8%BF%87%E4%B8%8E%E8%BF%9C%E7%A8%8B%E4%BB%A3%E7%A0%81%E6%89%A7/
https://www.cnvd.org.cn/flaw/show/CNVD-2026-02909
https://www.tenablecloud.cn/plugins/nessus/189950
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/Ivanti/Ivanti_Connect_Secure%E8%BF%9C%E7%A8%8B%E5%91%BD%E4%BB%A4%E6%B3%A8%E5%85%A5%E6%BC%8F%E6%B4%9E(CVE-2024-21887).md
https://hub.ivanti.com/s/article/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways
https://www.sonicwall.com/blog/ivanti-authentication-bypass-vulnerability
https://nvd.nist.gov/vuln/detail/cve-2024-21887
https://www.assetnote.io/resources/research/ivantis-pulse-connect-secure-auth-bypass-round-two/
https://www.splunk.com/en_us/blog/security/security-insights-investigating-ivanti-connect-secure-auth-bypass-and-rce.html
https://www.cyber.gc.ca/en/alerts-advisories/ivanti-connect-secure-and-ivanti-policy-secure-gateways-zero-day-vulnerabilities