{"id":75368,"date":"2025-09-16T02:25:59","date_gmt":"2025-09-16T02:25:59","guid":{"rendered":""},"modified":"2025-10-02T15:30:55","modified_gmt":"2025-10-02T21:30:55","slug":"cve-2025-55142-critical-authorization-bypass-vulnerability-in-ivanti-products","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-55142-critical-authorization-bypass-vulnerability-in-ivanti-products\/","title":{"rendered":"CVE-2025-55142: Critical Authorization Bypass Vulnerability in Ivanti Products<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The Common Vulnerability and Exposures (CVE) system has recorded a critical security flaw identified as CVE-2025-55142. This vulnerability affects multiple Ivanti products, including Ivanti Connect Secure, Ivanti Policy Secure, Ivanti ZTA Gateway, and Ivanti Neurons for Secure Access. If exploited, this flaw allows an authenticated attacker with read-only admin privileges to manipulate authentication-related settings, potentially compromising the system or leading<\/a> to data leakage. Given the severity of the vulnerability<\/a> and the potential for significant harm, it’s crucial for organizations using these Ivanti products to understand this issue and take appropriate measures to mitigate it.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-55142
\nSeverity: Critical (8.8 out of 10)
\nAttack Vector: Network
\nPrivileges Required: Low (Authenticated with Read-Only Admin access<\/a>)
\nUser Interaction: None
\nImpact: System compromise<\/a> or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n