The CERT-FR has identified multiple vulnerabilities in Ivanti products, including risks to data integrity, confidentiality, remote code execution, privilege escalation, and denial of service. Affected systems include various versions of Avalanche, Connect Secure, Endpoint Manager, Neurons for ITSM/ITAM, Policy Secure, and Secure Access Client. Critical vulnerabilities allow attackers to execute arbitrary remote code, prompting the release of temporary fixes for some affected versions
https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-0434/