Missing Authorization Vulnerability in Ivanti Virtual Application Delivery Controller

CVE-2025-8310

What is CVE-2025-8310?

The Ivanti Virtual Application Delivery Controller prior to version 22.9 contains a vulnerability in its admin console that lacks proper authorization mechanisms. An attacker with remote access could exploit this flaw by resetting the admin account's password, potentially gaining control over administrative functions within the system. This issue emphasizes the importance of ensuring robust authentication processes to safeguard administrative privileges and prevent unauthorized access.

References