Ivanti Secure Access Client Improper Certificate Validation Vulnerability Allowing Arbitrary Code Execution

A vulnerability allowing improper certificate validation has been identified in Ivanti Secure Access Client for Windows, in versions prior to 22.8R6. This vulnerability enables a remote, unauthenticated attacker to execute arbitrary code on the affected system.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

Users are advised to update to Ivanti Secure Access Client version 22.8R6. This version is compatible with Ivanti Connect Secure 25.1.1.0, 22.8R2.3, 22.7R2.12, Ivanti Policy Secure 22.7R1.12, and Ivanti Neurons for ZTNA 22.8R1.10.