Threats Tagged 'cve-2024-21888'
View all threats tagged with 'cve-2024-21888'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2024-21888'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2024-21888 is a high-severity privilege escalation vulnerability affecting Ivanti Connect Secure (ICS) and Ivanti Policy Secure web components in versions 9.1R18 and 22.6R2. This flaw allows an authenticated user with limited privileges to escalate their access to administrator level without requiring user interaction. The vulnerability impacts confidentiality, integrity, and availability, enabling full control over the affected systems. No known exploits are currently reported in the wild, but the ease of exploitation and critical impact make it a significant risk. European organizations using these Ivanti products, especially in sectors relying on secure remote access and policy enforcement, are at risk. Mitigation requires prompt patching once updates are available and implementing strict access controls and monitoring. Countries with high adoption of Ivanti ICS solutions and critical infrastructure reliance on remote access VPNs are most likely affected. Given the CVSS score of 8. Join the discussion | CVE Database V5 | 01/31/2024, 17:51:34 UTC Added: 06/03/2025, 18:58:33 UTC |
Showing 1 to 1 of 1 result