Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways

Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways

/in

Ivanti has alerted customers of yet another high-severity security flaw in its Connect Secure, Policy Secure, and ZTA gateway devices that could allow attackers to bypass authentication.
The issue, tracked as CVE-2024-22024, is rated 8.3 out of 10 on the CVSS scoring system.
“An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure (9.x, 22.x), Ivanti

The Hacker News – ​Read More

Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active Exploit...Fortinet Warns of Critical FortiOS SSL VPN Flaw Likely Under Active ExploitationCodeSignal targets skills gap with ‘Learn’ platform amidst tech talent crunchCodeSignal targets skills gap with ‘Learn’ platform amidst tech talent ...