cve/2023/CVE-2023-46805.md

CVE-2023-46805

Description

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

POC

Reference

• http://packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html

Github

• https://github.com/20142995/sectool
• https://github.com/Cappricio-Securities/CVE-2023-46805
• https://github.com/Chocapikk/CVE-2023-46805
• https://github.com/H4lo/awesome-IoT-security-article
• https://github.com/HiS3/Ivanti-ICT-Snapshot-decryption
• https://github.com/Ostorlab/KEV
• https://github.com/TheRedDevil1/Check-Vulns-Script
• https://github.com/cbeek-r7/CVE-2023-46805
• https://github.com/duy-31/CVE-2023-46805_CVE-2024-21887
• https://github.com/emo-crab/attackerkb-api-rs
• https://github.com/farukokutan/Threat-Intelligence-Research-Reports
• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/inguardians/ivanti-VPN-issues-2024-research
• https://github.com/jake-44/Research
• https://github.com/jamesfed/0DayMitigations
• https://github.com/jaredfolkins/5min-cyber-notes
• https://github.com/mickdec/CVE-2023-46805_CVE-2024-21887_scan_grouped
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887
• https://github.com/rxwx/pulse-meter
• https://github.com/seajaysec/Ivanti-Connect-Around-Scan
• https://github.com/stephen-murcott/Ivanti-ICT-Snapshot-decryption
• https://github.com/tanjiti/sec_profile
• https://github.com/toxyl/lscve
• https://github.com/w2xim3/CVE-2023-46805
• https://github.com/yoryio/CVE-2023-46805
• https://github.com/zwxxb/CVE-2023-21887