CVE-2023-46805: high-severity vulnerability in Ivanti ICS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Patch now. It under exploitation confirmed by CISA, has an official Brazilian government alert, has a working public exploit and 1 threat group(s) use it.
Brazil's federal government published an alert, recommendation or bulletin that cites this vulnerability.
- CTIR Gov · ALERTA 02/2024Atualizações sobre vulnerabilidades em produtos Volexity Ivantiread on gov.br ↗
- CTIR Gov · ALERTA 01/2024Vulnerabilidades críticas em produtos Volexity Ivantiread on gov.br ↗
Groups known to exploit this vulnerability (MITRE ATT&CK attribution).
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Ivanti ICS and Policy Secure have a flaw that lets remote attackers skip authentication checks and access restricted resources they shouldn't be able to reach. This is dangerous because it allows unauthorized access to sensitive system components.
An authentication bypass exists in Ivanti ICS (9.x, 22.x) and Policy Secure web components that permits remote attackers to circumvent access control mechanisms without valid credentials. The vulnerability allows unauthorized access to restricted resources; no user interaction is required, making it a direct network-exploitable vector with high impact on confidentiality and integrity.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.