Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-39709

Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1 (Not Applicable to 9.1Rx) allow a local authenticated attacker to escalate their privileges.

Published

2024-11-13T02:15:18.993

Last Modified

2025-07-16T00:32:01.760

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-732
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ivanti connect_secure < 9.1 Yes
Application ivanti connect_secure < 22.6 Yes
Application ivanti connect_secure 9.1 Yes
Application ivanti connect_secure 22.6 Yes
Application ivanti connect_secure 22.6 Yes
Application ivanti policy_secure < 9.1 Yes
Application ivanti policy_secure < 22.7 Yes
Application ivanti policy_secure 9.1 Yes
Application ivanti policy_secure 22.7 Yes
References