
The security infrastructure of Ivanti is under significant strain due to a pair of critical vulnerabilities impacting its Connect Secure and Policy Secure solutions. The more severe of these is a server-side request forgery (SSRF) issue, cataloged as CVE-2024-21893, which boasts a high severity rating of 8.2. This vulnerability compromises the SAML service, potentially allowing malefactors to gain unauthorized entry