Attacker chains three Ivanti Connect Secure zero-days for root access

Volexity said on October 13 that an attacker chained three zero-day flaws in Ivanti Connect Secure VPN appliances to run commands as root without logging in. Ivanti has patched only two of the flaws and told customers on affected versions to act immediately, with a fix for the third still pending.

• Three zero-days in Ivanti Connect Secure chained for root access
• Only two of the three flaws have been patched so far
• Volexity reported the flaws to Ivanti on October 13
• Ivanti urged customers on affected versions to act immediately