CVE-2022-21828 Deserialization in Ivanti Incapptic Connect
High-privilege users can remotely execute code on the Ivanti Incapptic Connect server via an unspecified attack vector.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-21828?
CVE-2022-21828 is a high-severity unsafe deserialization vulnerability in Ivanti Incapptic Connect, published on 4 Mar 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A user with high privilege access to the Incapptic Connect web console can remotely execute code on the Incapptic Connect server using a unspecified attack vector in Incapptic Connect version 1.40.0, 1.39.1, 1.39.0, 1.38.1, 1.38.0, 1.37.1, 1.37.0, 1.36.0, 1.35.5, 1.35.4 and 1.35.3.
Weakness: CWE-502
Which versions are affected by CVE-2022-21828?
It affects 1 product.
Products include Ivanti Incapptic Connect.
How do I fix CVE-2022-21828?
No fix has been published for CVE-2022-21828 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2022-21828 being exploited?
There is no known exploitation of CVE-2022-21828 in the wild and no public exploit code.
Other vulnerabilities in Ivanti Incapptic Connect
Sources
Also known as GHSA-8v5g-6h8h-cgr2.