NetSight
medium5.5

CVE-2025-5463

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a l…

Impact

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information.

Affected products

VendorProductAffected versions
IvantiConnect Secure
before 22.7
Version 22.7
IvantiPolicy Secure
before 22.7
Version 22.7

Weakness classification

References