CVE-2024-47906

🗓️ 12 Nov 2024 16:15:22Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 13 Views

Excessive binary privileges in Ivanti Connect Secure and Ivanti Policy Secur

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of Ivanti Connect Secure and Ivanti Policy Secure, which are network access control tools, stems from insecure privilege management. This allows attackers to elevate their privileges.	5 Mar 202500:00	–	bdu_fstec
Broadcom	Security Advisory Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), Ivanti Secure Access Client (ISAC) (Multiple CVEs)	3 Feb 202500:00	–	broadcom
CNNVD	Ivanti Connect Secure 安全漏洞	12 Nov 202400:00	–	cnnvd
CVE	CVE-2024-47906	12 Nov 202415:59	–	cve
Cvelist	CVE-2024-47906	12 Nov 202415:59	–	cvelist
EUVD	EUVD-2024-42773	3 Oct 202520:07	–	euvd
Ivanti	Security Advisory Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), Ivanti Secure Access Client (ISAC) (Multiple CVEs)	11 Nov 202416:57	–	ivanti
Tenable Nessus	Pulse Connect Secure < 22.7R2.3 Multiple Vulnerabilities (000096001)	15 Nov 202400:00	–	nessus
Tenable Nessus	Ivanti Policy Secure 22.7R1.2 (Build 1485) Multiple Vulnerabilities	15 Nov 202400:00	–	nessus
NCSC	Vulnerabilities fixed in Ivanti Connect Secure and Policy Secure	13 Nov 202412:38	–	ncsc

NVD

Node

ivanti connect_secureRange<9.1

OR

ivanti connect_secureRange9.1–22.7

OR

ivanti connect_secureMatch22.7-

OR

ivanti connect_secureMatch22.7r1

OR

ivanti connect_secureMatch22.7r1.1

OR

ivanti connect_secureMatch22.7r1.2

OR

ivanti connect_secureMatch22.7r1.3

OR

ivanti connect_secureMatch22.7r1.4

OR

ivanti connect_secureMatch22.7r1.5

OR

ivanti connect_secureMatch22.7r2

OR

ivanti connect_secureMatch22.7r2.1

OR

ivanti connect_secureMatch22.7r2.2

OR

ivanti policy_secureRange<9.1

OR

ivanti policy_secureRange9.1–22.7

OR

ivanti policy_secureMatch22.7r1

OR

ivanti policy_secureMatch22.7r1.1

Source	Link
forums	www.forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs

17 Jan 2025 20:27Current

CVSS 3.17.8

EPSS0.00372

CWE-426 CWE-267

ivanti connect secure ivanti policy secure excessive binary privileges cve-2024-47906 local authenticated attacker privilege escalation