Description
Ivanti Pulse Connect Secure VPN 是一种广泛应用于企业网络的 VPN 解决方案。该漏洞存在于 /dana-na/auth/saml-sso.cgi 接口中，攻击者可以通过发送特制的 SAML 请求，利用 XML 实体注入漏洞，发起服务端请求伪造（SSRF）攻击，可能导致敏感信息泄露或进一步的攻击。
Ivanti Pulse Connect Secure VPN /dana-na/auth/saml-sso.cgi XML 外部实体注入漏洞（CVE-2024-22024）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2024-22024
https://forums.ivanti.com/s/article/CVE-2024-22024-XXE-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US
https://labs.watchtowr.com/are-we-now-part-of-ivanti/
https://cn-sec.com/archives/2528612.html
https://www.rapid7.com/db/vulnerabilities/pulse-secure-pulse-connect-secure-cve-2024-22024/
https://www.huntress.com/threat-library/vulnerabilities/cve-2024-22024
https://www.tarlogic.com/blog/cve-2024-22024-xxe-ivanti/
https://attackerkb.com/topics/VJ2ISyYV6L/cve-2024-22024
https://www.ivanti.com/blog/security-update-for-ivanti-connect-secure-and-ivanti-policy-secure-gateways-282024
https://github.com/eeeeeeeeee-code/POC/blob/main/wpoc/Ivanti/CVE-2024-22024.md