CVE-2021-22893

Description

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.

References

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• https://nvd.nist.gov/vuln/detail/CVE-2021-22893
• https://www.cisa.gov/news-events/directives/ed-21-03-mitigate-pulse-connect-secure-product-vulnerabilities
• https://github.com/ZephrFish/CVE-2021-22893_HoneyPoC2
• https://raw.githubusercontent.com/ZephrFish/CVE-2021-22893_HoneyPoC2/main/exploit.sh
• https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-10025
• https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/
• https://blog.pulsesecure.net/pulse-connect-secure-security-update/
• https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html
• https://kb.cert.org/vuls/id/213092