onyx

onyx --cves cve-2023-46805

CVE-2023-46805

N/AKEVNUCLEI ↗Pulse Secure
score
<0.1
cvss
—
epss
100.0%
published
—
kev added
2024-01-10
first seen

Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the web component that allows an attacker to access restricted resources by bypassing control checks. This vulnerability can be leveraged in conjunction with CVE-2024-21887, a command injection vulnerability.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2024-01-10 — Added to CISA KEVK2026-10-21 — Tracked by OnyxT2026-10-21 (seen by) — Nuclei template: Ivanti ICS - Authentication BypassNscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 100.0%2026-09-23: epss 100.0%2026-09-24: epss 100.0%2026-09-25: epss 100.0%2026-09-26: epss 100.0%2026-09-27: epss 100.0%2026-09-28: epss 100.0%2026-09-29: epss 100.0%2026-09-30: epss 100.0%2026-10-01: epss 100.0%2026-10-02: epss 100.0%2026-10-03: epss 100.0%2026-10-04: epss 100.0%2026-10-05: epss 100.0%2026-10-06: epss 100.0%2026-10-07: epss 100.0%2026-10-08: epss 100.0%2026-10-09: epss 100.0%2026-10-10: epss 100.0%2026-10-11: epss 100.0%2026-10-12: epss 100.0%2026-10-13: epss 100.0%2026-10-14: epss 100.0%2026-10-15: epss 100.0%2026-10-16: epss 100.0%2026-10-18: epss 100.0%2026-10-19: epss 100.0%2026-10-20: epss 100.0%2026-10-21: epss 100.0%100.0%mentions/day0no mentions in 30 days2026-09-22today
  1. Added to CISA KEV
  2. Tracked by Onyx
  3. Nuclei template Ivanti ICS - Authentication Bypass

Nuclei template

A verified check exists — you can scan for this today, and so can everyone else.

template
Ivanti ICS - Authentication Bypass
severity
HIGH
first seen
nuclei -id CVE-2023-46805 -u https://target.example

Weaknesses

CWE-287

References 2