Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities
60
Vulnerability3 · 1 read
CVE-2024-21888
- CVSS 3.1
- 8.8 high
- EPSS
- 87%p100
- Published
- ·
- Modified
Description · NVD
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an administrator.
- Vendors
- ivanti
- Products
- connect secure, policy secure
- Weakness
- CWE-269
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news
20 stories60
New Ivanti Vulnerability Observed as Widespread Security Concerns Grow
60
60
60
60
Ivanti warns of a new auth bypass flaw in its Connect Secure, Policy Secure, and ZTA gateway devices
60
60
Latest Ivanti Zero Day Exploited By Scores of IPs
60
60
Warning: New Malware Emerges in Attacks Exploiting Ivanti VPN Vulnerabilities
60
60
60
Multiple malware used in attacks exploiting Ivanti VPN flaws
60
Ivanti Releases Zero
60
60
60
Ivanti warns of a new actively exploited zero
60
47
35