CVE-2025-5463 - Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information

Back Back to CVE browser

MEDIUM

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information

Published Jul 8, 2025

5.5

MEDIUM

CVSS 3.1

EPSS 0.35%

Description

Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 and Ivanti Policy Secure before version 22.7R1.5 allows a local authenticated attacker to obtain that information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-532

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-20509		Advisory
https://forums.ivanti.com/s/article/July-Security-Advisory-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Multiple-CVEs		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ivanti

Published Jul 8, 2025

Updated Jul 8, 2025

Reserved Jun 2, 2025

Link CVE-2025-5463

CISA Vulnrichment

Updated Jul 8, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-5463

Red Hat

No data

ENISA EUVD

Assigner ivanti

Published Jul 8, 2025

Updated Jul 8, 2025

Link EUVD-2025-20509

GitHub

No data