Practical Vulnerability Archaeology Starring Ivanti's CVE-2021-44529 | Grey Noise Blog

Summary: GreyNoise Labs examined CVE-2021-44529, an Ivanti vulnerability that Ivanti's advisory attributes to "code injection" while online sources claimed it is actually a backdoor. The team used archives such as the Wayback Machine to investigate the vulnerability because most of its details are no longer available.
What you should know: A vulnerability whose official description and public claims disagree, and whose details have largely disappeared, leaves security leaders unable to say with confidence whether an Ivanti system was compromised by an injection flaw or a backdoor.

Read the original at GreyNoise Blog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-44529 CVE-2024-21887 CVE-2024-21893
Related: Threat Brief: Multiple Ivanti Vulnerabilities (Updated Feb. 29) Cyber Risks ·
CVE-2021-44529: Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability Known Exploited Vulnerabilities · Mar 25, 2024
CVE-2024-21893: Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability Known Exploited Vulnerabilities · Jan 31, 2024