The version of Ivanti Policy Secure installed on the remote host is prior to 22.7R1.2 (Build 1485). It is, therefore, affected by multiple vulnerabilities as referenced in the CVE-2024-11005 advisory.

  - A null pointer dereference in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure     before version 22.7R1.1 allows a remote unauthenticated attacker to cause a denial of service.
    (CVE-2024-8495)

  - A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure before version     22.7R1.2 allows a remote authenticated attacker to achieve remote code execution. (CVE-2024-9420)

  - Reflected XSS in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version     22.7R1.1 allows a remote unauthenticated attacker to obtain admin privileges. User interaction is     required. (CVE-2024-11004)

  - Command injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before version     22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.
    (CVE-2024-11005, CVE-2024-11006, CVE-2024-11007)

  - Argument injection in Ivanti Connect Secure before version 22.7R2.1 and Ivanti Policy Secure before     version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code     execution. (CVE-2024-38655)

  - Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure     before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to achieve remote     code execution. (CVE-2024-38656)

  - Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 and Ivanti Policy Secure before     version 22.6R1 allow a local authenticated attacker to escalate their privileges. (CVE-2024-39709)

  - Argument injection in Ivanti Connect Secure before version 22.7R2 and 9.1R18.7 and Ivanti Policy Secure     before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote     code execution. (CVE-2024-39710)

  - Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure     before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote     code execution. (CVE-2024-39711, CVE-2024-39712)

  - A stack-based buffer overflow in Ivanti Connect Secure before version 22.7R2.3 and Ivanti Policy Secure     before version 22.7R1.2 allows a remote authenticated attacker with admin privileges to cause a denial of     service. (CVE-2024-47905, CVE-2024-47909)

  - Excessive binary privileges in Ivanti Connect Secure which affects versions 22.4R2 through 22.7R2.2     inclusive within the R2 release line and Ivanti Policy Secure before version 22.7R1.2 allow a local     authenticated attacker to escalate privileges. (CVE-2024-47906)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Ivanti Policy Secure 22.7R1.2 (Build 1485) Multiple Vulnerabilities

high Nessus Plugin ID 211467

Version 1.4

Version 1.2

Version 1.1

Version 1.4 Dec 13, 2024, 4:24 PM New Plugin Feed: 202412131624
Version 1.2 Nov 19, 2024, 9:44 AM CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H") CVSS metrics ("CVSSv3 score" set to 7.2) CVSSv3 score source (changed from "CVE-2024-39712" to "CVE-2024-11007") Plugin Feed: 202411190944
Version 1.1 Nov 15, 2024, 9:33 PM New Plugin Feed: 202411152133