Multiple vulnerabilities in Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS)

Published: 2025-02-13

Risk	Low
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2024-38657 CVE-2024-10644
CWE-ID	CWE-73 CWE-94
Exploitation vector	Network
Public exploit	N/A
Vulnerable software	Ivanti Policy Secure (formerly Pulse Policy Secure) Server applications / Remote access servers, VPN Ivanti Connect Secure (formerly Pulse Connect Secure) Server applications / Remote access servers, VPN
Vendor	Ivanti

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) External Control of File Name or Path

EUVDB-ID: #VU103939

Risk: Low

CVSSv4.0: 2.5 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:U/U:Clear]

CVE-ID: CVE-2024-38657

CWE-ID: CWE-73 - External Control of File Name or Path

Exploit availability: No

Description

The vulnerability allows a remote user to write arbitrary files.

The vulnerability exists due to external control of a file name. A remote administrator can write arbitrary files on the system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

Ivanti Policy Secure (formerly Pulse Policy Secure): 22.7R1 - 22.7R1.2

Ivanti Connect Secure (formerly Pulse Connect Secure): 22.7R2 - 22.7R2.4

CPE2.3

External links

http://forums.ivanti.com/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs?language=en_US

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected application in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Code Injection

EUVDB-ID: #VU103941