| Package | Affected versions | Patched versions |
|---|---|---|
| connect secure | = 21.12= 21.9= 22.1= 22.7= 9.1≥ 22.2, < 22.7< 9.1 | 22.79.1 |
| neurons for zero-trust access | = 22.2= 22.3= 22.4= 22.5= 22.6= 22.7 | |
| policy secure | = 22.7< 22.7 | 22.7 |
A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 allows a local authenticated attacker to escalate their privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free