Description
A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | DSM | 2024.2 – < 2024.2 | 2024.2 |
Advisories 1
- WID-SEC-2025-1535 Ivanti Desktop and Server Management: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Jul 13, 2025