İçeriğe geç
Bilgi ve Teknoloji Uygulamada aç

Orta CVSS 5.4

CVE-2025-8712: Neurons For Secure Access: eksik yetkilendirme

Yayın: · Güncelleme:

Açıklama (NVD)

Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings.

Özet bilgiler

Ürün
Ivanti Neurons For Secure Access
CVSS v3.1
5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
EPSS
%0,45 (yüzdelik 39)
CWE
CWE-862
Yama
Yok / bilinmiyor

Etkilenen sürümler

ÜrünBaşlangıçBitişDüzeltildi
ivanti-neurons-for-secure-access——22.8
ivanti-neurons-for-secure-access22.822.8—
ivanti-neurons-for-secure-access22.822.8—
ivanti-neurons-for-secure-access22.822.8—
ivanti-neurons-for-secure-access22.822.8—
ivanti-connect-secure——22.7
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-connect-secure22.722.7—
ivanti-policy-secure——22.7
ivanti-policy-secure22.722.7—
ivanti-policy-secure22.722.7—
ivanti-policy-secure22.722.7—
ivanti-policy-secure22.722.7—
ivanti-policy-secure22.722.7—
ivanti-policy-secure22.722.7—
ivanti-policy-secure22.722.7—

Kaynaklar

Uygulamada aç Tüm CVE kayıtları