high7.8
CVE-2024-39709
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1 (Not Applica…
Impact
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1 (Not Applicable to 9.1Rx) allow a local authenticated attacker to escalate their privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Connect Secure | before 9.1 from 21.9 before 22.6 Versions 9.1, 22.6 |
| Ivanti | Policy Secure | before 9.1 from 22.1 before 22.7 Versions 9.1, 22.7 |