Removed a dash/hyphen due to character limits. > Ivanti said the two vulnerabilities — tracked as CVE-2023-46805 and CVE-2024-21887 — were found in its Ivanti

Removed a dash/hyphen due to character limits. > Ivanti said the two vulnerabilities — tracked as CVE-2023-46805 and CVE-2024-21887 — were found in its Ivanti Connect Secure software. https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authen... > …security researcher Kevin Beaumont noted on Mastodon that there will “likely be many more victims.” Beaumont, who has dubbed the two vulnerabilities “ConnectAround,” posted results from a scan showing roughly 15,000 affected Ivanti appliances exposed to the internet globally. https://cyberplace.social/@GossiTheDog/111732557100241084 https://cyberplace.social/@GossiTheDog/111732557100241084