CVE-2024-47906

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Nov 12, 2024
Source updated: Nov 22, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1.2 (Not Applicable to 9.1Rx) allows a local authenticated attacker to escalate privileges.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Connect Secure

Vendor: Ivanti
Product: Connect Secure
Platforms: Unknown
Default status: unaffected

Connect Secure · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
22.4R2	`affected`	custom	Unavailable	22.7R2.2	None listed
22.7R2.3	`unaffected`	custom	Unavailable	Unavailable	None listed

Policy Secure

Vendor: Ivanti
Product: Policy Secure
Platforms: Unknown
Default status: affected

Policy Secure · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
22.7R1.2	`unaffected`	custom	Unavailable	Unavailable	None listed