PT-2025-6447 · Ivanti · Ivanti

Published 2025-02-11 · Updated 2025-03-11 · CVE-2024-38657

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions prior to 22.7R2.4 Ivanti Policy Secure versions prior to 22.7R1.3

Description The issue is related to external control of a file name, allowing a remote authenticated attacker with admin privileges to write arbitrary files. This can be exploited by an attacker to record arbitrary files.

Recommendations For Ivanti Connect Secure versions prior to 22.7R2.4, update to version 22.7R2.4 or later. For Ivanti Policy Secure versions prior to 22.7R1.3, update to version 22.7R1.3 or later.

Fix

Weakness Enumeration

CWE-73

Related Identifiers

BDU:2025-01598

CVE-2024-38657

Affected Products

Ivanti

References · 26

• https://osv.dev/vulnerability/CVE-2024-38657 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-01598 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38657 · Security Note
• https://forums.ivanti.com/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs · Vendor Advisory
• https://twitter.com/socradar/status/1890024447857287494 · Twitter Post
• https://twitter.com/IT_news_for_all/status/1889554627009413197 · Twitter Post
• https://t.me/cvenotify/111961 · Telegram Post
• https://twitter.com/CveFindCom/status/1892757272159199389 · Twitter Post
• https://t.me/thehackernews/6324 · Telegram Post
• https://twitter.com/StreetWalker212/status/1889581463240081865 · Twitter Post
• https://t.me/true_secator/6726 · Telegram Post
• https://twitter.com/pravin_karthik/status/1889580868517150855 · Twitter Post
• https://cybersecurity-help.cz/vdb/SB2025021310 · Note
• https://twitter.com/achi_tech/status/1890077207671746616 · Twitter Post
• https://twitter.com/rfwaveio/status/1889854253583536610 · Twitter Post