Ivanti has misjudged a bug in the VPN software Connect Secure. This is a security vulnerability that is under attack.