Improper Access Control in Ivanti Connect Secure and Policy Secure
CVE-2025-5450
6.3MEDIUM
What is CVE-2025-5450?
Improper access control has been identified in the certificate management component of Ivanti Connect Secure and Ivanti Policy Secure prior to their respective version updates. This vulnerability allows a remote authenticated administrator with read-only access to inadvertently modify settings that should be restricted, potentially compromising the integrity and security of the systems involved. Organizations are recommended to update to the latest versions to mitigate this risk.
Affected Version(s)
Connect Secure 22.7R2.8
Policy Secure 22.7R1.5