Orta CVSS 4.9
CVE-2025-55146: Connect Secure: güvenlik açığı
Açıklama (NVD)
An unchecked return value in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with admin privileges to trigger a denial of service.
Özet bilgiler
- Ürün
- Ivanti Connect Secure
- CVSS v3.1
- 4.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,80 (yüzdelik 57)
- CWE
- CWE-252
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ivanti-connect-secure | — | — | 22.7 |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-connect-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | — | — | 22.7 |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-policy-secure | 22.7 | 22.7 | — |
| ivanti-zero-trust-access-gateway | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | — | — | 22.8 |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |
| ivanti-neurons-for-secure-access | 22.8 | 22.8 | — |