Security Advisory

CVE-2024-22052

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-04-04 19:45:10
Last updated 2024-10-03 21:40:23
Assigner hackerone
State PUBLISHED

Description

A null pointer dereference vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack