{"id":886,"date":"2024-01-11T10:03:14","date_gmt":"2024-01-11T10:03:14","guid":{"rendered":"https:\/\/www.cert.hr\/novosti\/upozorenje-ivanti-kriticne-ranjivosti\/"},"modified":"2026-11-04T08:52:54","modified_gmt":"2026-11-04T08:52:54","slug":"upozorenje-ivanti-kriticne-ranjivosti","status":"publish","type":"post","link":"https:\/\/cert.hr\/en\/ranjivosti\/upozorenje-ivanti-kriticne-ranjivosti\/","title":{"rendered":"UPOZORENJE! IVANTI KRITI\u010cNE RANJIVOSTI"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Otkrivene su 0-day<\/strong> <strong>ranjivosti u Ivanti Connect Secure-u (ICS)<\/strong> (prije poznat kao Pulse Connect Secure) <strong>i Ivanti Policy Secure pristupnicima (engl. g<em>ateways<\/em>).<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ranjive su sve podr\u017eane verzije \u2013 verzije 9.x i 22.x (podr\u017eane verzije mo\u017eete provjeriti <\/strong><a href=\"https:\/\/forums.ivanti.com\/s\/article\/Granular-Software-Release-EOL-Timelines-and-Support-Matrix?language=en_US\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>OVDJE<\/strong><\/a><strong>).<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ranjivosti:<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2023-46805\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2023-46805 (Authentication Bypass) CVSS 8.2<\/a><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u2013 <\/strong>ranjivost omogu\u0107uje <strong>zaobila\u017eenje autentifikacije<\/strong> u web komponenti Ivanti ICS-a i Ivanti Policy Secure-a te napada\u010du omogu\u0107uje pristup nedostupnim resursima.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><a href=\"https:\/\/cve.cert.hr\/cve\/CVE-2024-21887\" target=\"_blank\" rel=\"noreferrer noopener\">CVE-2024-21887 (Command Injection) CVSS 9.1<\/a><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2013 ranjivost omogu\u0107uje <strong>unos naredbi<\/strong> u web komponente ICS-a i Ivanti Policy Secure-a. Autentificiranom administratoru omogu\u0107uje slanje posebno napravljenih zahtjeva i izvr\u0161avanje proizvoljnih naredbi na ure\u0111aju.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ako se ove dvije ranjivosti iskoriste zajedno, napada\u010d ne mora biti autentificiran kako bi slao zlonamjerne zahtjeve i izvr\u0161avao proizvoljne naredbe u sustavu!<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><span class=\"has-inline-color has-vivid-red-color\">Dok se ne izdaju zakrpe za ove ranjivosti, potrebno je \u0161to prije poduzeti mitigacijske mjere.<\/span><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Ivanti je izdao datoteku koju je potrebno \u0161to prije implementirati, a mo\u017ee se preuzeti na njihovom <\/strong><a href=\"https:\/\/forums.ivanti.com\/s\/article\/Download-Links-Related-to-CVE-2023-46805-and-CVE-2024-21887\"><strong>portalu<\/strong><\/a><strong>.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Detaljan opis primjene mitigacije nalazi se <\/strong><a href=\"https:\/\/forums.ivanti.com\/s\/article\/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>OVDJE<\/strong><\/a><strong>.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>U slu\u010daju otkrivanja ranjivosti hitno obavijestite <\/strong><a href=\"https:\/\/success.ivanti.com\/community_home_page\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Ivanti<\/strong><\/a><strong> i <\/strong><a href=\"https:\/\/www.cert.hr\/onama\/kontakt\/\" target=\"_blank\" rel=\"noreferrer noopener\"><strong>Nacionalni CERT<\/strong><\/a><strong> na adresu incident@cert[.]hr kako bi sprije\u010dili iskori\u0161tavanje ranjivosti i budu\u0107e ra\u010dunalno-sigurnosne incidente.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Pratite obavijesti Nacionalnog CERT-a.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Nakon izdavanja zakrpi bit \u0107e ih potrebno instalirati u \u0161to kra\u0107em roku.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>[ZAKRPA]<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Najnovije informacije o ranjivostima mo\u017eete pratiti na poveznici:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/forums.ivanti.com\/s\/article\/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/forums.ivanti.com\/s\/article\/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Otkrivene su 0-day ranjivosti u Ivanti Connect Secure-u (ICS) (prije poznat kao Pulse Connect Secure) i Ivanti Policy Secure pristupnicima (engl. gateways). Ranjive su sve podr\u017eane verzije \u2013 verzije 9.x i 22.x (podr\u017eane verzije mo\u017eete provjeriti OVDJE). Ranjivosti: CVE-2023-46805 (Authentication Bypass) CVSS 8.2 \u2013 ranjivost omogu\u0107uje zaobila\u017eenje autentifikacije u web komponenti Ivanti ICS-a i Ivanti [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1361,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":[],"meta":{"_acf_changed":false,"footnotes":""},"categories":[27],"tags":[],"tema":[],"class_list":["post-886","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ranjivosti"],"acf":[],"_links":{"self":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/886","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/comments?post=886"}],"version-history":[{"count":1,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/886\/revisions"}],"predecessor-version":[{"id":1366,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/posts\/886\/revisions\/1366"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media\/1361"}],"wp:attachment":[{"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/media?parent=886"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/categories?post=886"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tags?post=886"},{"taxonomy":"tema","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/tema?post=886"},{"taxonomy":"format","embeddable":true,"href":"https:\/\/cert.hr\/en\/wp-json\/wp\/v2\/format?post=886"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}