Ivanti Connect Secure/Policy Secure Multiple Vulnerabilities Advisory (CVE-2023-4712 to 4718)

Critical Vulnerability Information Vulnerability Overview Product: Ivanti Connect Secure, Policy Secure, ZTA Gateways, and Neurons for Secure Access Date: Created on September 8, 2023, last modified on October 16, 2023 Update: Policy Secure affected and fixed versions updated on October 10 Vulnerability Details Affected Versions Ivanti Connect Secure: Versions 23.7R6.0 and earlier Ivanti Policy Secure: Versions 23.7T1.0 and earlier ZTA Gateways: Versions 23.8R2.0 and earlier Neurons for Secure Access: Versions 23.8R2.0 and earlier Remediation Ivanti Connect Secure: Upgrade to version 23.7R6.0 or later Ivanti Policy Secure: Upgrade to version 23.7T1.0 or later ZTA Gateways: Upgrade to version 23.8R2.0 or later Neurons for Secure Access: Upgrade to version 23.8R2.0 or later Mitigation or Workarounds Customers should significantly reduce the risk posed by CVE-2023-4712, CVE-2023-4713, CVE-2023-4714, CVE-2023-4715, CVE-2023-4716, CVE-2023-4717, and CVE-2023-4718. If the admin user is not granted Internet access, this aligns with best practices.

Goal Reached Thanks to every supporter — we hit 100%!

Ivanti Connect Secure/Policy Secure Multiple Vulnerabilities Advisory (CVE-2023-4712 to 4718)