=====================================================================

                              CERT-Renater

                    Note d'Information No. 2024/VULN465
_____________________________________________________________________

DATE                : 13/11/2024

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Ivanti EPM, Ivanti Avalanche,
                     Ivanti Connect Secure, Ivanti Policy Secure and
                     Ivanti Security Access Client.

=====================================================================
https://www.ivanti.com/blog/november-2024-security-update
https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-Multiple-CVEs-Q4-2024-Release?language=en_US
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs?language=en_US
_____________________________________________________________________


November Security Update
Last updated: November 12, 2024
Security Advisory

At Ivanti, our top priority is upholding our commitment to deliver
and maintain secure products for our customers. Our vulnerability
management program is designed to enable us to find, fix and
disclose vulnerabilities in collaboration with the broader security
ecosystem, and communicate responsibly and transparently with
customers.

Ivanti is making a large investment in Secure by Design across
our organization and signed the CISA Secure by Design pledge in
May. You can follow along with our progress here.

Today, fixes have been released for the following Ivanti solutions:
Ivanti Endpoint Manager (EPM), Ivanti Avalanche,
Ivanti Connect Secure, Ivanti Policy Secure and
Ivanti Security Access Client.

It is important for customers to know:

     We have no evidence of any of these vulnerabilities being exploited
in the wild.
     These vulnerabilities do not impact any other Ivanti products or
solutions.

More information on these vulnerabilities and detailed instructions on
how to remediate the issues can be found in these Security Advisories:

     Ivanti EPM
     Ivanti Avalanche
     Ivanti Connect Secure, Ivanti Policy Secure and Ivanti Security
Access Client

Our Support team is always available to help customers and partners
should they have any questions. Cases can be logged via the Success
portal (login credentials required).

Want to stay up to date on Ivanti Security Advisories?
Paste https://www.ivanti.com/blog/topics/security-advisory/rss
into your preferred RSS reader / functionality in your email program.


=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================
