Disclosure of Four Additional Vulnerabilities: Ivanti Commits to Security

Ivanti’s CEO announced an overhaul of the company’s security processes following new disclosures in its Ivanti Connect Secure and Policy Secure products (CVE-2024-21894, [CVSS 8.2], CVE-2024-22052 [CVSS 7.5], CVE-2024-22053, [CVSS 8.2]) Immediate actions involve integrating security throughout the software development cycle and adding features to reduce risks. Ivanti also plans to bolster vulnerability management, offer more incentives for bug discovery, and improve access to vulnerability information.