CVE 5.5 MEDIUM

CVE-2025-5468_CVE-2025-5468

5.5 / 10
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before 22.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a local authenticated attacker to read arbitrary files on disk.

Basic Information

ID CVE-2025-5468
Source ivanti
Published Aug 12, 2025 at 15:05
Modified Aug 12, 2025 at 18:58

Affected Product

Vendor Ivanti
Product Connect Secure
Version 22.7R2.8

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.