Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
Nyxfrom the ivanti-connect-secure-trilogy dept.
An attacker chained three previously unknown Ivanti Connect Secure flaws to reach root access and extract stored credentials from a single appliance. Only two of the three vulnerabilities have received patches so far, leaving one unpatched vulnerability in the wild.