CVE-2021-22893 — Ivanti Pulse Connect Secure Use-After-Free Vulnerability

CISA KEVExploited: confirmedIvanti

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services.

Vulnerability details

Affected productsPulse Connect Secure
KEV remediation due2022-05-03