CVE-2024-11634

CVSS V2 None CVSS V3 None
Description
Command injection in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote code execution. (Not applicable to 9.1Rx)
Overview
  • CVE ID
  • CVE-2024-11634
  • Assigner
  • ivanti
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-12-10T18:48:29.024Z
  • Last Modified Date
  • 2024-12-10T20:26:31.990Z
Weakness Enumerations
CWE URL
CWE-77 http://cwe.mitre.org/data/definitions/77.html
References
Reference URL Reference Tags
https://forums.ivanti.com/s/article/December-2024-Security-Advisory-Ivanti-Connect-Secure-ICS-and-Ivanti-Policy-Secure-IPS-Multiple-CVEs
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-11634
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11634
History
Created Old Value New Value Data Type Notes
2024-12-11 13:26:32 Added to TrackCVE