Ivanti Connect Secure
Moderate fix1 remedy
cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 22.7R2.7
Ivanti Connect Secure Sensitive Information Log Injection Vulnerability
Vulnerability
Patched
A vulnerability exists in Ivanti Connect Secure (ICS) versions prior to 22.7R2.8) that allows local authenticated attackers to insert sensitive information into a log file, which can then be accessed to obtain that information.
Impact
Exploitation of this vulnerability could lead to unauthorized access to sensitive information through log files.
Remediation
Users can upgrade to Ivanti Connect Secure version 22.7R2.8 to address this vulnerability. The update is available through the Ivanti Download Portal.
Added: Jul 8, 2025, 5:06 PM
Updated: Jul 8, 2025, 5:06 PM
Vulnerability Rating
Custom Algorithm
spread
3.4impact
2.5exploitability
4.0remediation
7.7relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.