← Database

CVE-2024-39709

HIGH CVSS: 7.8 Published: 2024-11-13 Modified: 2026-06-17

Description

Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1 (Not Applicable to 9.1Rx) allow a local authenticated attacker to escalate their privileges.

Affected Platforms

Ivanti Connect SecureIvanti Policy Secure

Weakness Type

CWE-732

References