Description
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an administrator.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | ICS | 9.1R18 – ≤ 9.1R18, 22.6R2 – ≤ 22.6R2 | — |
| Ivanti | IPS | 9.1R18 – ≤ 9.1R18, 22.6R1 – ≤ 22.6R1 | — |
Advisories 1
- WID-SEC-2024-0262 Ivanti Connect Secure: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 1, 2024