Security is foundational to how Ivanti builds, tests, and supports our products. We continue to strengthen our secure product development practices through vulnerability discovery, responsible disclosure processes, security testing, threat-informed hardening, and coordinated response programmes. Additionally, we recognise the importance of clear, timely communication when security issues arise.
To that end, today we are disclosing a vulnerability in limited versions of Ivanti Connect Secure. At the time of disclosure, Ivanti is aware of limited exploitation in the wild. We are working directly with those organisations while making information, updates and remediation available to the broader customer community.
If you are running one of the impacted versions, Ivanti recommends you act immediately. Additional information related to the impacted versions and remediations can be found in the Security Advisory:
Customers should review the security advisory, upgrade to the fixed version as soon as possible, and run the Integrity Checker Tool regularly.
As with any security update, applying the fix is an essential step; however, it should be part of a layered security approach that includes strong access controls, network monitoring, log review, and ongoing validation of appliance integrity.
Patch Tuesday Disclosures
As part of our regular security programme, Ivanti releases standard security patches on the second Tuesday of every month. At the time of disclosure, Ivanti is not aware of exploitation in the wild, and the fixes have been released.
More information can be found in the Security Advisories:
Our Support team is always available to help customers and partners should they have any questions. Cases can be logged via the Ivanti Innovators Hub (login credentials required).
Want to stay up to date on Ivanti Security Advisories? Paste https://www.ivanti.com/blog/topics/security-advisory/rss into your preferred RSS reader / functionality in your email programme.