Description
Ivanti Connect Secure contains an authentication bypass by spoofing vulnerability that allows a remote unauthenticated attacker to execute arbitrary commands.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Connect Secure | Ivanti / Connect Secure | 22.7R2.14 | unaffected |
| Connect Secure | Ivanti / Connect Secure | 22.8R2.5 | unaffected |
| Connect Secure | Ivanti / Connect Secure | 25.1.3.0 | unaffected |
| Connect Secure | Ivanti / Connect Secure | 25.1.3.1 | unaffected |