Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways

Ivanti disclosed CVE-2024-22024, an XXE vulnerability in the SAML component of Ivanti Connect Secure, Policy Secure, and ZTA gateway appliances (CVSS 8.3) that could allow attackers to bypass authentication. Multiple affected versions are listed and patches have been released; Ivanti reports no evidence of active exploitation, but security researchers note the issue resulted from an incorrect fix for a prior bug and can enable SSRF, local file read, and DoS impacts.