Vulnerability Bulletins

CVE-2025-5463

   
Affected software IVANTI
 
Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-5463