CVE-2024-21887 PoC — Ivanti Connect Secure 命令注入漏洞

Source

https://github.com/imhunterand/CVE-2024-21887

Associated Vulnerability

Title:Ivanti Connect Secure 命令注入漏洞 (CVE-2024-21887)
Description:Ivanti Connect Secure是美国Ivanti公司的安全远程网络连接工具。 Ivanti Connect Secure 9.x、22.x系列版本、 Ivanti Policy Secure 9.x、22.x系列版本存在命令注入漏洞，该漏洞源于Web 组件中存在命令注入，允许经过身份验证的管理员发送特制请求并在设备上执行任意命令。

Description

Ivanti Connect Secure &  Ivanti Policy Secure allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance. (RCE Exploits)

Readme

# CVE-2024-21887
Ivanti Connect Secure &amp;  Ivanti Policy Secure allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance. (RCE Exploits)

File Snapshot


 [4.0K]  /data/pocs/f818f144c2b20fc83037aa3110c9157eb7d6233a
├── [4.5K]  CVE202421887.py
├── [ 204]  README.md
└── [  92]  requirements.txt

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!