Executive Risk Summary
"A local authenticated attacker can exploit incorrect file permissions in Ivanti Connect Secure and Ivanti Policy Secure to escalate their privileges, potentially leading to unauthorized access and data breaches. Affected versions include Ivanti Connect Secure before 22.6R2 and Ivanti Policy Secure before 22.7R1."
Operational Audit Arsenal
Target Type File System
Target Asset Ivanti Connect Secure Configuration Files
Standard Path /opt/ivanti/connectsecure
Manual Verification Required
This is a non-Windows asset (Ivanti). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.
Patch Impact Forecast
Reboot Required Likely
Moderate
Internal Work Notes
CVE-2024-39709: Ivanti Connect Secure and Policy Secure Privilege Escalation Vulnerability - Apply version 22.6R2 or later for Connect Secure and 22.7R1 or later for Policy Secure to mitigate
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Related Ivanti Threats
Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.