Volerion logoVolerion
Volerion logoVolerion

Ivanti Connect Secure and Policy Secure Hardcoded Key Vulnerability Allowing Data Read

Vulnerability

A vulnerability exists in Ivanti Connect Secure (ICS) versions prior to 22.7R2.3 and Ivanti Policy Secure (IPS) versions prior to 22.7R1.3. This vulnerability is due to a hardcoded key that enables a local authenticated attacker with admin privileges to read sensitive data.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive data.

Remediation

Users can upgrade to Ivanti Connect Secure version 22.7R2.6 or Ivanti Policy Secure version 22.7R1.3. These versions are available on the Ivanti Download Portal.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
5.4
impact
2.5
exploitability
2.8
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.