[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6FYeOFnzxDx25e6yqzyP_Xm-InTfaj3mj5uLCZH3mRM":3,"g5a-risk:CVE-2024-11598":123},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":51,"references":52,"referencesCount":58,"weaknesses":59,"weaknessesCount":58,"isActivelyExploited":68,"cisaInfo":26,"otxData":26,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":118,"notableEvents":119},"CVE-2024-11598","What is CVE-2024-11598?","Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation.","Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenti...","2024-12-11T17:15:14.453","2025-01-23T20:12:36.087",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"3c1d8aa1-5a33-4ea4-8992-aadd6440af75","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.00209,[33,33,33,33,33,33,33],"High",[37,42,45,48],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"ivanti","application_control","*","cpe:2.3:a:ivanti:application_control:*:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"2023.3","cpe:2.3:a:ivanti:application_control:2023.3:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"2024.1","cpe:2.3:a:ivanti:application_control:2024.1:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":49,"criteria":50,"vulnerable":4},"2024.3","cpe:2.3:a:ivanti:application_control:2024.3:*:*:*:*:*:*:*",4,[53],{"url":54,"source":55,"tags":56},"https:\u002F\u002Fforums.ivanti.com\u002Fs\u002Farticle\u002FDecember-2024-Security-Advisory-Ivanti-Application-Control-CVE-2024-11598","Ivanti",[57],"Vendor Advisory",1,[60],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2024-11598? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-11598, a high severity cyber security vulnerability from 2024. Under specific circumstances, insecure permissions in Ivant...","CVE-2024-11598, CVE-2024-11598 vulnerability, CVE-2024-11598 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, ivanti security, application_control vulnerability","\u002Fwhat-is\u002Fcve-2024-11598",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-11598","Cybersecurity","CVE-2024-11598, CVE-2024-11598 vulnerability, CVE-2024-11598 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":26,"Negate":26,"Nodes":97},[98],{"Operator":99,"Negate":26,"CPEMatch":100},"OR",[101,103,105,108,111,113,116],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":102,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":43},"BA57F84F-C75C-4742-BA72-C948D231FD50",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":104,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"3824F2AD-3D52-4874-9468-76CD8ABA051B",{"Vulnerable":4,"Criteria":106,"MatchCriteriaID":107,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:ivanti:application_control:2023.3:hf1:*:*:*:*:*:*","7B4A0566-0FB2-4AFC-A202-B6C1C09F4616",{"Vulnerable":4,"Criteria":109,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:ivanti:application_control:2023.3:hf2:*:*:*:*:*:*","4FEA9599-9981-4640-A02B-64BC2D826597",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":112,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DD963203-04A4-4C8B-B900-3E0B8259E64C",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":115,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"cpe:2.3:a:ivanti:application_control:2024.1:hf1:*:*:*:*:*:*","2CC58F0C-035A-45E0-9523-056AF0C98086",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"64320F86-5E36-4110-83F8-037C67A584C1",[],[],{"lastModified":11,"cacheTime":121,"version":122},1793228696689,"2.0",{"score":124,"band":125,"action":126,"scoredAt":127},46,"Medium","Plan remediation","2026-10-28T07:05:17.204778+00:00"]