Summary
Ivanti is releasing security updates that address two vulnerabilities, one of which is a “high” severity vulnerability, in Neurons for MDM and Secure Access Client (ISAC) products.
Risk
Vulnerability community impact estimate: Medium (63.84)
Type
- Privilege Escalation
Affected products and/or versions
Ivanti Secure Access Client (ISAC), version 22.7R3 and earlier.
Mitigation actions
In line with vendor statements, it is recommended to update vulnerable products by following the guidance in the security bulletin reported in the References section.
The following are only the CVEs related to the “high” severity vulnerabilities:
References
https://www.ivanti.com/blog/march-security-update
1This estimate is made taking into account several parameters, including: CVSS, availability of patches/workarounds and PoC, diffusion of the affected software/devices in the reference community.
