CVE-2024-38657

Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions prior to 22.7R2.4 Ivanti Policy Secure versions prior to 22.7R1.3

Description The issue is related to external control of a file name, allowing a remote authenticated attacker with admin privileges to write arbitrary files. This can be exploited by an attacker to record arbitrary files.

Recommendations For Ivanti Connect Secure versions prior to 22.7R2.4, update to version 22.7R2.4 or later. For Ivanti Policy Secure versions prior to 22.7R1.3, update to version 22.7R1.3 or later.