Skip to content
OpenAdvisories
Critical VA-25-043-01 1 CVE

Ivanti Connect Secure and Ivanti Policy Secure external file control vulnerability

Published Feb 12, 2025 · Updated Feb 20, 2025 · Revision 2

Vendor: ivanti Product: Connect Secure Product: Policy Secure

Summary

Ivanti Connect Secure and Ivanti Policy Secure contain a vulnerability that allows a remote, authenticated attacker to write arbitrary files. These vulnerabilities are addressed in Ivanti Connect Secure version 22.7R2.4 and Ivanti Policy Secure version 22.7R1.3.

Vulnerabilities 1

Revision history

  1. #1.0.1

    Updated remedation information

  2. #1.0.0

    Initial publication