Unrated severityNVD Advisory· Published Jan 31, 2024· Updated Dec 16, 2025

CVE-2024-21888

Description

A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate privileges to that of an administrator.

Affected products

Ivanti/Connect Securellm-fuzzy
Range: 9.x, 22.x
Ivanti/Policy Securellm-fuzzy
Range: 9.x, 22.x
Ivanti/ICSv5
Range: 9.1R18
Ivanti/IPSv5
Range: 9.1R18

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/CVE-2024-21888-Privilege-Escalation-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Securemitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.069
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000