CISA Adds One Known Exploited Vulnerability to Catalog

Here is a brief summary of the document:

Summary:

The Cybersecurity and Infrastructure Security Agency (CISA) has added the CVE-2024-21893 Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability to its Known Exploited Vulnerabilities Catalog. This vulnerability, which poses a significant risk to the federal enterprise, has been exploited actively by malicious cyber actors. According to Binding Operational Directive (BOD) 22-01, Federal Civilian Executive Branch (FCEB) agencies must remediate identified vulnerabilities by the due date to protect their networks. CISA urges all organizations to prioritize timely remediation of catalog vulnerabilities to reduce their exposure to cyberattacks.