Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities
60
CVE-2024-21888
—1CVSS 3.1
8.8 high
EPSS
87%p100
Published
()
Modified
Description
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an administrator.
- Vendors
- ivanti
- Products
- connect secure, policy secure
- Weakness
- CWE-269
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the news20 stories
60
New Ivanti Vulnerability Observed as Widespread Security Concerns Grow
60
60
60
Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways
60
Ivanti warns of a new auth bypass flaw in its Connect Secure, Policy Secure, and ZTA gateway devices
60
60
Latest Ivanti Zero Day Exploited By Scores of IPs
60
60
Warning: New Malware Emerges in Attacks Exploiting Ivanti VPN Vulnerabilities
60
60
CISA orders federal agencies to disconnect Ivanti VPN instances by February 2
60
60
Ivanti Releases Zero
60
60
60
Ivanti warns of a new actively exploited zero
60
47
35