CVE-2024-29205

An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a remote unauthenticated attacker to send specially crafted requests in-order-to cause service disruptions.

Score

CVSS 3.0 7.5 High

Status

Deferred - support@hackerone.com

Published

2024-04-25

Last modified

2024-10-03

Weaknesses

CWE-703

Affected products

• Connect Secure (Ivanti)
• Policy Secure (Ivanti)

References

• https://forums.ivanti.com/s/article/SA-CVE-2024-21894-Heap-Overflow-CVE-2024-22052-Null-Pointer-Dereference-CVE-2024-22…