CVE-2024-47906: High severity ivanti pulse connect secure vulnerability
Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.2 (Not Applicable to 9.1Rx) allows a local authenticated attacker to escalate privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47906?
CVE-2024-47906 is considered a high-severity vulnerability due to its potential for local authenticated privilege escalation.
How do I fix CVE-2024-47906?
To fix CVE-2024-47906, upgrade Ivanti Connect Secure to version 22.7R2.3 or later and Ivanti Policy Secure to version 22.7R1.2 or later.
Who is affected by CVE-2024-47906?
CVE-2024-47906 affects users of Ivanti Connect Secure versions prior to 22.7R2.3 and Ivanti Policy Secure versions prior to 22.7R1.2.
What does CVE-2024-47906 allow an attacker to do?
CVE-2024-47906 allows a local authenticated attacker to escalate their privileges on the affected systems.
Is CVE-2024-47906 applicable to Ivanti 9.1Rx?
No, CVE-2024-47906 is not applicable to versions 9.1Rx of Ivanti Connect Secure or Ivanti Policy Secure.