PT-2024-1468 · Ivanti · Ivanti Policy Secure+1

Published 2024-01-22 · Updated 2025-01-09 · CVE-2024-21888

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Ivanti Connect Secure versions 9.x through 22.x Ivanti Policy Secure versions 9.x through 22.x

Description A privilege escalation vulnerability in the web component of Ivanti Connect Secure and Ivanti Policy Secure allows a user to elevate privileges to that of an administrator. The issue is related to insufficient access control. An attacker can exploit this vulnerability to gain administrator privileges. There is evidence that this vulnerability is being exploited in the wild.

Recommendations For Ivanti Connect Secure versions 9.x through 22.x, update to a version that includes a fix for this vulnerability. For Ivanti Policy Secure versions 9.x through 22.x, update to a version that includes a fix for this vulnerability. As a temporary workaround, consider restricting access to the web component of Ivanti Connect Secure and Ivanti Policy Secure to minimize the risk of exploitation.

Exploit

Fix

Improper Privilege Management

SSRF

Weakness Enumeration

CWE-269

CWE-264

CWE-918

Related Identifiers

BDU:2024-00974

BDU:2024-01028

CVE-2024-21888

Affected Products

Ivanti Connect Secure

Ivanti Policy Secure

References · 105

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanti_connect_secure_rce_cve_2024_21893.rb · Exploit
• https://bdu.fstec.ru/vul/2024-00974 · Security Note
• https://osv.dev/vulnerability/CVE-2024-21888 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01028 · Security Note
• https://forums.ivanti.com/s/article/CVE-2024-21888-Privilege-Escalation-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure?language=en_US · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-21888 · Security Note
• https://twitter.com/VulmonFeeds/status/1752732558930980988 · Twitter Post
• https://twitter.com/TrellixARC/status/1760413099029667963 · Twitter Post
• https://twitter.com/tgorospe/status/1753426889300169052 · Twitter Post
• https://twitter.com/securityshell/status/1752707468801851425 · Twitter Post
• https://t.me/true_secator/5408 · Telegram Post
• https://twitter.com/CCBalert/status/1752710987692609632 · Twitter Post
• https://twitter.com/tun4hunt/status/1756790819321786753 · Twitter Post
• https://twitter.com/circl_lu/status/1752700489073070591 · Twitter Post
• https://twitter.com/cipherstorm/status/1754676683825909968 · Twitter Post