{"$schema":"https://docs.oasis-open.org/csaf/csaf/v2.1/schema/csaf.json","document":{"category":"csaf_informational_advisory","csaf_version":"2.1","title":"Ivanti Connect Secure and Ivanti Policy Secure Gateway Vulnerabilities","distribution":{"tlp":{"label":"CLEAR"}},"publisher":{"category":"vendor","name":"WatchGuard PSIRT","namespace":"https://www.watchguard.com"},"tracking":{"id":"WGSA-2024-00004","status":"final","version":"25","initial_release_date":"2024-02-02T13:39:38+00:00","current_release_date":"2026-07-28T01:19:13.245501+00:00","revision_history":[{"date":"2024-02-02T13:39:38+00:00","number":"25","summary":"Initial release."}]},"references":[{"summary":"vendor-advisory","url":"https://psirt.watchguard.com/WGSA-2024-00004"},{"summary":"cve","url":"https://www.cve.org/CVERecord?id=CVE-2023-46805"},{"summary":"cve","url":"https://www.cve.org/CVERecord?id=CVE-2024-21887"},{"summary":"cve","url":"https://www.cve.org/CVERecord?id=CVE-2024-21888"},{"summary":"cve","url":"https://www.cve.org/CVERecord?id=CVE-2024-21893"}],"notes":[{"category":"summary","text":"On January 10th, Ivanti disclosed an authentication bypass and a command injection vulnerability affecting their Connect Secure and Policy Secure Gateway appliances. These vulnerabilities could allow an unauthenticated attacker to potentially execute arbitrary commands on vulnerable devices.\n\nNo WatchGuard products are affected by this vulnerability.","title":"Summary"}]}}