CVE-2024-21888 — Ivanti / ICS

Description (CNA)

A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an administrator.

Affected (CNA)

Vendor / product	Versions
Ivanti / ICS	affected 9.1R18 through 9.1R18; affected 22.6R2 through 22.6R2
Ivanti / IPS	affected 9.1R18 through 9.1R18; affected 22.6R1 through 22.6R1

CWE

No CWE identifiers supplied.

References

https://forums.ivanti.com/s/article/CVE-2024-21888-Privilege-Escalation-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://forums.ivanti.com/s/article/CVE-2024-21888-Privilege-Escalation-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US