Ivanti Pulse Connect Secure VPN 存在远程代码执行

2024-01-14 Ivanti Pulse Connect Secure VPN PoC No

Description

Ivanti Pulse Connect Secure VPN 存在权限绕过漏洞，攻击者可构造恶意请求绕过身份认证，若结合CVE-2024-21887漏洞，未经授权的攻击者可以在设备上执行任意命令，获取服务器权限

PoC

None yet. Search at https://trap.biu.life/?ref=rss

Related Vulnerabilities