Ivanti, the company behind Pulse Secure VPN appliances, has released a security patch to remediate a critical security vulnerability that was found being actively exploited in the wild by at least two different threat actors.
Tracked as CVE-2021-22893 (CVSS score 10), the flaw concerns « multiple use after free » issues in Pulse Connect Secure that could allow a remote unauthenticated attacker to
Source de l’article sur The Hacker News
