A vulnerability exists on all versions of Ivanti Connect Secure below 22.6R2 where an attacker with a foothold on an Ivanti Connect Secure (ICS) appliance can escalate their privileges by exploiting a vulnerable installed application. This vulnerability allows the attacker to gain elevated execution privileges on the affected system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Pulse Secure Pulse Connect Secure | — | Update Ivanti Connect Secure to version 22.4R2.4Update Ivanti Connect Secure to version 22.6R2.3Update Ivanti Connect Secure to version 22.5R2.3 | May 21, 2024 | Dec 4, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub