CVE-2024-38655

Summary

CVE-2024-38655 is a newly disclosed vulnerability affecting Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1. This issue grants remote, authenticated attackers with admin privileges the ability to execute arbitrary code through argument injection. Successful exploitation could lead to significant security risks, including unauthorized system access and data breaches. It is recommended that affected organizations upgrade to the latest versions of Ivanti Connect Secure and Ivanti Policy Secure to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.