Improper Certificate Validation RCE in Ivanti Secure Access Client

Successful exploitation can result in arbitrary code execution by a remote unauthenticated attacker on an affected system. This gives an attacker the ability to run attacker-controlled code in the context of the vulnerable client, which may lead to full compromise of the endpoint, installation of malware, data theft, or use of the host as a pivot point for further intrusion activity.

If immediate upgrade is not possible, reduce exposure by limiting use of affected Ivanti Secure Access Client versions on untrusted networks, enforcing strict TLS inspection and certificate trust controls through enterprise policy where feasible, and restricting installation or use of the client to managed systems until the fixed version can be deployed. However, the primary mitigation is to upgrade to 22.8R6, as no vendor-provided workaround is described in the supplied content.

Upgrade Ivanti Secure Access Client for Windows to version 22.8R6 or later. Ivanti states that version 22.8R6 resolves this vulnerability. Where applicable, ensure compatibility with supported server-side components identified by Ivanti, including listed versions of Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti Neurons for ZTNA.