CVE-2025-55148 - Vulnerability Details

Description

Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings.

Published: 2025-09-09

Score: 7.6 High

EPSS: 2.3% Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Ivanti

Connect Secure

affected

Version	Status	Constraints
`22.7R2.9`	unaffected	—
`22.8R2`	unaffected	—

Ivanti

Policy Secure

affected

Version	Status	Constraints
`22.7R1.6`	unaffected	—

Ivanti

ZTA Gateway

affected

Version	Status	Constraints
`2.8R2.3-723`	unaffected	—

Ivanti

Neurons for Secure Access

affected

Version	Status	Constraints
`22.8R1.4 (Fix deployed on 02-Aug-2025)`	unaffected	—

Configuration 1 [-]

OR	cpe:2.3:a:ivanti:connect_secure::::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:-::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r1::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r1.1::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r1.2::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r1.3::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r1.4::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r1.5::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r2::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r2.1::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r2.2::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r2.3::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r2.4::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r2.5::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r2.6::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r2.7::::::
	cpe:2.3:a:ivanti:connect_secure:22.7:r2.8::::::

Configuration 2 [-]

OR	cpe:2.3:a:ivanti:policy_secure::::::::
	cpe:2.3:a:ivanti:policy_secure:22.7:-::::::
	cpe:2.3:a:ivanti:policy_secure:22.7:r1::::::
	cpe:2.3:a:ivanti:policy_secure:22.7:r1.1::::::
	cpe:2.3:a:ivanti:policy_secure:22.7:r1.2::::::
	cpe:2.3:a:ivanti:policy_secure:22.7:r1.3::::::
	cpe:2.3:a:ivanti:policy_secure:22.7:r1.4::::::
	cpe:2.3:a:ivanti:policy_secure:22.7:r1.5::::::

Configuration 3 [-]

cpe:2.3:a:ivanti:zero_trust_access_gateway:22.8:r2.2:*:*:*:*:*:*

Configuration 4 [-]

OR	cpe:2.3:a:ivanti:neurons_for_secure_access::::::::
	cpe:2.3:a:ivanti:neurons_for_secure_access:22.8:r1::::::
	cpe:2.3:a:ivanti:neurons_for_secure_access:22.8:r1.1::::::
	cpe:2.3:a:ivanti:neurons_for_secure_access:22.8:r1.2::::::
	cpe:2.3:a:ivanti:neurons_for_secure_access:22.8:r1.3::::::

No data.

Vendor	Product	Confidence	Versions
Ivanti	Connect Secure	—	—
Ivanti	Neurons For Secure Access	—	—
Ivanti	Policy Secure	—	—
Ivanti	Zta Gateway	—	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2025-27286	Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.02294.

Exploitation none

Automatable no

Technical Impact partial

References

Link	Providers
https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US

History

Wed, 24 Sep 2025 20:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Ivanti zero Trust Access Gateway
CPEs		cpe:2.3:a:ivanti:connect_secure:::::::: cpe:2.3:a:ivanti:connect_secure:22.7:-:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r1.1:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r1.2:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r1.3:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r1.4:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r1.5:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r1:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r2.2:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r2.3:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r2.4:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r2.5:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r2.6:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r2.7:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r2.8:::::: cpe:2.3:a:ivanti:connect_secure:22.7:r2:::::: cpe:2.3:a:ivanti:neurons_for_secure_access:::::::: cpe:2.3:a:ivanti:neurons_for_secure_access:22.8:r1.1:::::: cpe:2.3:a:ivanti:neurons_for_secure_access:22.8:r1.2:::::: cpe:2.3:a:ivanti:neurons_for_secure_access:22.8:r1.3:::::: cpe:2.3:a:ivanti:neurons_for_secure_access:22.8:r1:::::: cpe:2.3:a:ivanti:policy_secure:::::::: cpe:2.3:a:ivanti:policy_secure:22.7:-:::::: cpe:2.3:a:ivanti:policy_secure:22.7:r1.1:::::: cpe:2.3:a:ivanti:policy_secure:22.7:r1.2:::::: cpe:2.3:a:ivanti:policy_secure:22.7:r1.3:::::: cpe:2.3:a:ivanti:policy_secure:22.7:r1.4:::::: cpe:2.3:a:ivanti:policy_secure:22.7:r1.5:::::: cpe:2.3:a:ivanti:policy_secure:22.7:r1:::::: cpe:2.3:a:ivanti:zero_trust_access_gateway:22.8:r2.2::::::
Vendors & Products		Ivanti zero Trust Access Gateway

Tue, 09 Sep 2025 21:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Ivanti Ivanti connect Secure Ivanti neurons For Secure Access Ivanti policy Secure Ivanti zta Gateway
Vendors & Products		Ivanti Ivanti connect Secure Ivanti neurons For Secure Access Ivanti policy Secure Ivanti zta Gateway

Tue, 09 Sep 2025 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 09 Sep 2025 15:45:00 +0000

Type	Values Removed	Values Added
Description		Missing authorization in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and Ivanti Neurons for Secure Access before 22.8R1.4 (Fix deployed on 02-Aug-2025) allows a remote authenticated attacker with read-only admin privileges to configure restricted settings.
Weaknesses		CWE-862
References		https://forums.ivanti.com/s/article/September-Security-Advisory-Ivanti-Connect-Secure-Policy-Secure-ZTA-Gateways-and-Neurons-for-Secure-Access-Multiple-CVEs?language=en_US
Metrics		cvssV3_1 `{'score': 7.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H'}`

Subscriptions

Ivanti Connect Secure Neurons For Secure Access Policy Secure Zero Trust Access Gateway Zta Gateway

MITRE

Status: PUBLISHED

Assigner: ivanti

Published: 2025-09-09T15:37:45.415Z

Updated: 2025-09-09T17:31:58.340Z

Reserved: 2025-08-07T16:15:48.897Z

Link: CVE-2025-55148

Vulnrichment

Updated: 2025-09-09T16:05:29.503Z

NVD

Status : Analyzed

Published: 2025-09-09T16:15:35.250

Modified: 2025-09-24T19:58:37.017

Link: CVE-2025-55148

Redhat

No data.

OpenCVE Enrichment

Updated: 2025-09-09T21:31:10Z

Weaknesses

CWE-862

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact Low

Integrity Impact Low

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object