CVE-2024-39709: High severity ivanti pulse connect secure vulnerability
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1 (Not Applicable to 9.1Rx) allow a local authenticated attacker to escalate their privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-39709?
CVE-2024-39709 is classified as a privilege escalation vulnerability, indicating a high severity level depending on the context of the attack.
How do I fix CVE-2024-39709?
To mitigate CVE-2024-39709, upgrade Ivanti Connect Secure to version 22.6R2 or Ivanti Policy Secure to version 22.7R1.
Who is affected by CVE-2024-39709?
CVE-2024-39709 affects users of Ivanti Connect Secure versions prior to 22.6R2 and Ivanti Policy Secure versions prior to 22.7R1.
What types of attacks can exploit CVE-2024-39709?
CVE-2024-39709 can be exploited by local authenticated attackers to escalate privileges on affected systems.
Is CVE-2024-39709 applicable to older versions of Ivanti software?
CVE-2024-39709 is not applicable to Ivanti Connect Secure and Policy Secure versions 9.1Rx.