CVE-2024-11598

Summary

CVE-2024-11598 is a new vulnerability affecting Ivanti Application Control before versions 2024.3 HF1, 2024.1 HF2, and 2023.3 HF3. This issue arises due to insecure permissions, enabling a local authenticated attacker to escalate privileges and gain elevated access to the system. The attacker can exploit this vulnerability under specific circumstances, posing a potential security risk for organizations using the affected Ivanti Application Control versions. To mitigate this threat, it is recommended that users upgrade to the latest patched version as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.