CNNVD-202507-1031 Information

CNNVD ID

CNNVD-202507-1031

CVE-2025-5464

  • CNNVD Published: 2025-07-08

Description (Chinese)

Ivanti Connect Secure(ICS)是美国Ivanti公司的一款安全远程网络连接工具。 Ivanti Connect Secure 22.7R2.8之前版本存在日志信息泄露漏洞,该漏洞源于敏感信息插入日志文件,可能导致信息泄露。

Description (English)

Ivanti Contact Security (ICS) is a secure remote network connection tool for Ivanti, USA. Prior to Ivanti Contact Security 22.7R2.8, there was a leak in log information, which originated from the insertion of sensitive information into log files, which could lead to a leak.

Hazard Level

High

Vulnerability Type

日志信息泄露

Affected Vendor

iWT

Published

2025-07-08

Last Modified

2026-02-24

References

https://forums.ivanti.com/s/article/July-Security-Advisory-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Multiple-CVEs https://access.redhat.com/security/cve/cve-2025-5464

Patch

https://forums.ivanti.com/s/article/July-Security-Advisory-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Multiple-CVEs

Share on: