Ivanti security advisory (AV24-286)

Serial number: AV24-286
Date: May 22, 2024

On May 21, 2024, Ivanti published security advisories to address vulnerabilities in multiple products. Included were updates for the following:

• Ivanti Connect Secure (ICS) – versions 9.x and 22.x
• Ivanti Endpoint Manager (EPM) – version 2022 SU5 and prior
• Ivanti Neurons for ITSM/ITAM – versions 2023.4, 2023.3, 2023.2 and 2023.1
• Ivanti Policy Secure gateways – versions prior to 22.7R1
• Ivanti Secure Access – versions prior to 22.7R1

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• KB Security Advisory Ivanti Secure Access Client May 2024
• KB Security Advisory EPM May 2024
• KB: CVE-2024-22059 and CVE-2024-22060 for Ivanti Neurons for ITSM
• KB Security Advisory Ivanti Connect Secure & Ivanti Policy Secure May 2024
• Ivanti Security Advisories