Ivanti Policy Secure Arbitrary File Read Vulnerability for Authenticated Administrators

An arbitrary file read vulnerability has been identified in Ivanti Policy Secure versions prior to 22.6R1. This issue allows authenticated administrators to read arbitrary files by sending a maliciously crafted web request.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files on the server.

Remediation

Users can upgrade to Ivanti Policy Secure version 22.6R1 to address this vulnerability. For those on the 9.1Rx version, an upgrade to 9.1R18x, tentatively scheduled for late January 2024, is recommended.