Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-8495

A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to cause a den

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ivanti

Description

A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1 allows a remote unauthenticated attacker to cause a denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ivanti Connect Secure

Default version status: affected

  • 22.7R2.1unaffected

Ivanti Policy Secure

Default version status: affected

  • 22.7R1.1unaffected

References