CVE-2024-21888
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate…
High · published January 31, 2024
Patch now
High probability of exploitation
CVSS calls it high at 8.8. It sits in the 99.7th percentile for exploit probability.
What it is
A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an administrator.
The record
Technical detail
- CVSS v3.0
- 8.8 · HIGH
- Vector
- CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.85418 · 99.7th percentile
- Published
- 2024-01-31T17:51Z
EPSS history
Timeline