Yüksek CVSS 8.8
CVE-2025-55141: Connect Secure: eksik yetkilendirme
Açıklama (NVD)
Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure authentication related settings.
Özet bilgiler
- Ürün
- Ivanti Connect Secure
- CVSS v3.1
- 8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,96 (yüzdelik 62)
- CWE
- CWE-862
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ivanti-connect-secure | — | — | 22.7 |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | — | — | 22.7 |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-zero-trust-access-gateway | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | — | — | 22.8 |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |