Exposures › CVE-2021-22900
CVE-2021-22900
Severity
high · on CISA KEV actively exploited
Source
CISA-KEV · kev
Published
2021-11-03
Reference
⚡ RCE
⌖ exploited in the wild
shame 65/100
rceexploited-in-wild
Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
Players implicated
Description
Ivanti Pulse Connect Secure contains an unrestricted file upload vulnerability that allows an authenticated administrator to perform a file write via a maliciously crafted archive upload in the administrator web interface.
Affected FedRAMP products 2 in the catalog
| Product | Provider | Status | Match |
|---|---|---|---|
| Ivanti Neurons for ITSM (Formerly Service Manager) | Ivanti | Authorized | vendor-exact · 0.90 |
| Ivanti Neurons for MDM (Formerly MobileIron) | Ivanti | Authorized | vendor-exact · 0.90 |