Authentication Bypass in Ivanti Connect Secure and Policy Secure (CVE-2023-46805)

Summary

Acunetix 360 detected Authentication Bypass vulnerability.

The Ivanti Connect Secure and Ivanti Policy Secure have an authentication bypass vulnerability.
An attacker can bypass the authentication with a specially crafted HTTP request
and get administrative access to the system.

Impact

Remediation

Upgrade to the latest version of Ivanti Connect Secure / Policy Secure

Severity

Classification