CLRF Injection Vulnerability in Ivanti Connect Secure and Policy Secure
CVE-2025-0293
6.6MEDIUM
What is CVE-2025-0293?
A CLRF injection vulnerability exists in Ivanti Connect Secure and Ivanti Policy Secure prior to specified versions. This flaw enables remote authenticated attackers, possessing admin rights, to manipulate and modify protected configuration files on disk. Such unauthorized access could potentially compromise the integrity of sensitive configurations, exposing the systems to various security risks.
Affected Version(s)
Connect Secure 22.7R2.8
Policy Secure 22.7R1.5