Ivanti Connect Secure
Moderate fix1 remedy
cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 22.7R2.7
Ivanti Connect Secure and Ivanti Policy Secure CLRF Injection Vulnerability
Vulnerability
Patched
A CLRF injection vulnerability has been identified in Ivanti Connect Secure (ICS) versions through 22.7R2.7 and Ivanti Policy Secure (IPS) versions through 22.7R1.4. This vulnerability allows a remote authenticated attacker with admin rights to write to a protected configuration file on disk.
Impact
Exploitation of this vulnerability allows for unauthorized modification of protected configuration files, which could lead to further security issues or misconfigurations.
Remediation
Users can upgrade to Ivanti Connect Secure version 22.7R2.8 or Ivanti Policy Secure version 22.7R1.5. These versions are available on the Ivanti Download Portal.
Added: Jul 8, 2025, 5:10 PM
Updated: Jul 8, 2025, 5:10 PM
Vulnerability Rating
Custom Algorithm
spread
3.4impact
2.5exploitability
5.0remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.