This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.
[TLP:CLEAR] Ivanti fixes 4 vulnerabilities
Ivanti fixes 4 vulnerabilities in Ivanti Connect Secure, Policy Secure, ZTA Gateways and Neurons for Secure Access [1]. Products and their fixes [1]: Ivanti Connect Secure - 22.7R2.8, 22.8R2 Ivanti Policy Secure - 22.7R1.5 Ivanti ZTA Gateway - 22.8R2.3-723 Ivanti Neurons for Secure Access - 22.8R1.4
An unauthenticated remote attacker, due to a buffer over-read vulnerability, is able to carry out a DoS attack [1].
The vulnerability is present in products:
- Ivanti Connect Secure; <=22.7R2.7
- Ivanti Policy Secure ; <=22.7R1.4
- Ivanti ZTA Gateway; =22.8R2.2
- Ivanti Neurons for Secure Access; <=22.8R1.3
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2025-5456 at cve.org, NVD
- CWE-125: Out-of-bounds Read at cwe.mitre.org
The vulnerability was publicly disclosed 12. 8. 2025.
An unauthenticated remote attacker, due to a heap-based buffer overflow vulnerability, is able to carry out a DoS attack [1].
The vulnerability is present in products:
- Ivanti Connect Secure; <=22.7R2.7
- Ivanti Policy Secure ; <=22.7R1.4
- Ivanti ZTA Gateway; =22.8R2.2
- Ivanti Neurons for Secure Access; <=22.8R1.3
CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2025-5462 at cve.org, NVD
- CWE-122: Heap-based Buffer Overflow at cwe.mitre.org
- CWE-476: NULL Pointer Dereference at cwe.mitre.org
The vulnerability was publicly disclosed 12. 8. 2025.
An authenticated local attacker, due to improper handling of symbolic links, is able to read arbitrary files on the disk [1].
The vulnerability is present in products:
- Ivanti Connect Secure; <=22.7R2.7
- Ivanti Policy Secure ; <=22.7R1.4
- Ivanti ZTA Gateway; =22.8R2.2
- Ivanti Neurons for Secure Access; <=22.8R1.3
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
More information:
- CVE-2025-5468 at cve.org, NVD
- CWE-61: UNIX Symbolic Link (Symlink) Following at cwe.mitre.org
The vulnerability was publicly disclosed 12. 8. 2025.
An authenticated remote attacker with administrator privileges, due to an XXE vulnerability, is able to carry out a DoS attack [1].
The vulnerability is present in products:
- Ivanti Connect Secure; <=22.7R2.7
- Ivanti Policy Secure ; <=22.7R1.4
- Ivanti ZTA Gateway; =22.8R2.2
- Ivanti Neurons for Secure Access; <=22.8R1.3
CVSS: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
More information:
- CVE-2025-5466 at cve.org, NVD
- CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') at cwe.mitre.org
The vulnerability was publicly disclosed 12. 8. 2025.
By CESNET, z.s.p.o. Michaela Jarošová on 14. 8. 2025.