PT-2024-32882 · Ivanti · Ivanti Policy Secure+1
CVE-2024-47906
·
Published
2024-11-11
·
Updated
2025-01-17
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Ivanti Connect Secure versions 22.4R2 through 22.7R2.2
Ivanti Policy Secure versions prior to 22.7R1.2
Description
The issue is related to excessive binary privileges, allowing a local authenticated attacker to escalate privileges.
Recommendations
For Ivanti Connect Secure versions 22.4R2 through 22.7R2.2, update to version 22.7R2.3 or later.
For Ivanti Policy Secure versions prior to 22.7R1.2, update to version 22.7R1.2 or later.
Fix
Untrusted Search Path
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ivanti Connect Secure
Ivanti Policy Secure