CVE-2025-8310 — Ivanti / Virtual Application Delivery ControllerCWE-862

CVE-2025-8310

Ivanti / Virtual Application Delivery ControllerCWE-862 PUBLISHED

Description (CNA)

Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows a remote authenticated attacker to take over admin accounts by resetting the password

Affected (CNA)

Vendor / product	Versions
Ivanti / Virtual Application Delivery ControllerCWE-862	unaffected 22.9

CWE

CWE-862

References

https://forums.ivanti.com/s/article/August-Security-Advisory-Ivanti-Virtual-Application-Delivery-Controller-vADC-previously-vTM-CVE-2025-8310?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.