CVE

CVE-2021-22893

P1⬤ KNOWN RANSOMWARE USE

Ivanti Pulse Connect Secure Use-After-Free Vulnerability

Ivanti · Pulse Connect Secure

Date added (CISA)

2021-11-03

Remediation due

2022-05-03

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.

Source: NVD ↗ · CISA KEV Catalog ↗