Ivanti zero-day chain allows attackers root access to VPN
Summary
A chain of zero-day vulnerabilities in Ivanti VPN software has allowed attackers to gain unauthorized root access, even to fully patched deployments of the VPN. This incident highlights significant security risks within remote access infrastructure, as the exploit was effective despite the software being updated with the latest security patches.
Analysis
Ivanti: Ivanti is a provider of IT security and management solutions, including remote access and VPN technologies used by enterprises. The company was recently linked to a zero-day vulnerability chain in its VPN software that enabled attackers to achieve root-level access on fully patched installations. Impact: The exploit worked against fully patched VPN deployments, underscoring risks in remote access infrastructure. Vulnerability: A chain of zero-day flaws in Ivanti VPN software allowed unauthorized root access.
Categories
tech