high8.8
CVE-2024-21888
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privil…
Impact
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an administrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Connect Secure | Versions 9.0, 9.1, 21.9, 21.12, 22.1, 22.2 |
| Ivanti | Policy Secure | Versions 9.0, 9.1, 22.1, 22.2, 22.3, 22.4 |