Local Privilege Escalation Vulnerability in Ivanti Application Control
CVE-2024-11598

7.8HIGH

Key Information:

Vendor

Ivanti

Vendor
CVE Published:
11 December 2024

What is CVE-2024-11598?

In Ivanti Application Control prior to the specified versions, a security weakness exists due to improper permission settings. This flaw permits a locally authenticated attacker to exploit the vulnerability, leading to unauthorized privilege escalation. The exposure highlights a critical aspect of application security, emphasizing the need for regular updates and proper configuration to safeguard against local threats. Organizations utilizing affected versions should address these vulnerabilities through timely updates and implement stringent access controls to mitigate the risks associated with this oversight.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

Application Control 2024.3 HF1

Application Control 2024.3 HF1

Application Control 2024.1 HF2

References

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.