Ivanti Neurons for ITSM Improper Access Control Vulnerability Allowing Privilege Escalation

A vulnerability allowing improper access control has been identified in Ivanti Neurons for ITSM, both in cloud and on-premises versions. This vulnerability enables a remote authenticated attacker to gain administrative access. It arises from inadequate access control measures, allowing unauthorized elevation of privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized administrative access, allowing attackers to gain elevated privileges within the application.

Remediation

Users of Ivanti Neurons for ITSM on-premises can update to version 2025.4 Patch 1, 2025.3 Patch 1, or 2025.2 Patch 1. For cloud users, the update has already been applied.