CVE-2024-11006

Summary

CVE-2024-11006 is a command injection vulnerability affecting Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version 22.7R1.1. This issue grants remote, authenticated attackers with admin privileges the ability to execute arbitrary code, posing a significant risk to targeted systems. Exploitation of this vulnerability can lead to unauthorized system takeover and potential data theft or manipulation. Ivanti urges users to upgrade to the latest versions of Ivanti Connect Secure and Ivanti Policy Secure to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.