CVE-2024-11598: High severity ivanti application control vulnerability
Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11598?
CVE-2024-11598 has a moderate severity rating due to the potential for local privilege escalation.
How do I fix CVE-2024-11598?
To remediate CVE-2024-11598, upgrade Ivanti Application Control to version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3.
Who is affected by CVE-2024-11598?
CVE-2024-11598 affects users of Ivanti Application Control versions prior to 2024.3 HF1, 2024.1 HF2, and 2023.3 HF3.
What type of attack does CVE-2024-11598 enable?
CVE-2024-11598 allows a local authenticated attacker to achieve local privilege escalation.
Is there a workaround for CVE-2024-11598?
Currently, no official workaround is provided for CVE-2024-11598; updating to the fixed versions is the recommended solution.