If you're aware of the sheer number of exploits that can work around or without authentication against anything Ivanti, it has to be the latter.