Critical · published February 11, 2025
🚨 A remote admin with the right credentials can execute any code they want on Ivanti Connect and Policy Secure — it’s like giving someone the master key to your safe without realizing it! 🔥 Think of it as a restaurant kitchen where the head chef can freely add any ingredient to the dishes, even if they shouldn't be in charge of the menu. If the chef gets a hold of the wrong recipe, they could whip up something downright dangerous! An attacker could gain complete control over the affected systems, allowing them to run arbitrary code — imagine a malicious chef not just altering the recipes but also poisoning the entire restaurant! The consequences could be absolutely devastating, from data breaches to a complete system compromise.
Think of it as a restaurant kitchen where the head chef can freely add any ingredient to the dishes, even if they shouldn't be in charge of the menu. If the chef gets a hold of the wrong recipe, they could whip up something downright dangerous! This vulnerability allows remote authenticated attackers with admin privileges to inject and execute malicious code on Ivanti Connect Secure (prior to v22.7R2.4) and Ivanti Policy Secure (prior to v22.7R1.3). The exploitation leads to full remote code execution, a serious risk for any organization using these products.
An attacker could gain complete control over the affected systems, allowing them to run arbitrary code — imagine a malicious chef not just altering the recipes but also poisoning the entire restaurant! The consequences could be absolutely devastating, from data breaches to a complete system compromise. Immediately update Ivanti Connect Secure to version 22.7R2.4 and Ivanti Policy Secure to version 22.7R1.3 or later. Review your admin access policies to ensure only trusted personnel have these privileges and consider conducting a security audit to assess your systems. You've got this! With these updates and precautions, you'll keep your systems safe and secure. 🛡️