VDB
WID-SEC-W-2025-0029
WID-SEC-W-2025-0029
PUBLISHED
Connect Secure bietet TLS- und mobile VPN-Lösungen. Ivanti Policy Secure ist eine Network Access Control (NAC) Lösung.
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ivanti Connect Secure <22.7R2.5 | ||
| Ivanti Connect Secure 22.7R2.5 | ||
| Ivanti Policy Secure =<22.7R1.2 | ||
| Ivanti Policy Secure =22.7R1.2 |
Exploit Intelligence
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0029.json (circl)
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0029 (circl)
- https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 (circl)
- https://www.ivanti.com/blog/security-update-ivanti-connect-secure-policy-secure-and-neurons-for-zta-gateways (circl)
- yara.yar (github-yara)
Timeline
- Jan 8, 2025 CVE Published
- Jan 3, 2026 PoC Published
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0029.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0029 advisory
- https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-CVE-2025-0282-CVE-2025-0283 url
- https://www.ivanti.com/blog/security-update-ivanti-connect-secure-policy-secure-and-neurons-for-zta-gateways url