[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fA_QuC9P3_Io9wol5IcFxJILtVAG4OkXS389wcRicv08":3,"g5a-risk:CVE-2024-37398":110},{"success":4,"data":5,"meta":107},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":35,"epssPercentile":25,"epssTimeSeries":36,"severity":37,"affectedProducts":38,"affectedProductsCount":47,"references":48,"referencesCount":54,"weaknesses":55,"weaknessesCount":54,"isActivelyExploited":59,"cisaInfo":25,"otxData":25,"relatedBlogPosts":60,"seoMetadata":61,"configurations":86,"relatedVendorCves":105,"notableEvents":106},"CVE-2024-37398","What is CVE-2024-37398?","Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.","2024-11-13T02:15:18.003","2024-11-18T15:23:23.543",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":14,"CVSSMetricV30":28,"CVSSMetricV2":25,"CVSSMetricV40":25},[15],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":24,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[29],{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":26,"ImpactScore":27},"support@hackerone.com","Secondary",{"Version":33,"VectorString":34,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":21,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.0","CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",0.00321,[35,35,35,35,35,35,35],"High",[39,44],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"ivanti","secure_access_client","*","cpe:2.3:a:ivanti:secure_access_client:*:*:*:*:*:*:*:*",{"vendor":40,"product":41,"version":45,"criteria":46,"vulnerable":4},"22.7","cpe:2.3:a:ivanti:secure_access_client:22.7:-:*:*:*:*:*:*",2,[49],{"url":50,"source":51,"tags":52},"https:\u002F\u002Fforums.ivanti.com\u002Fs\u002Farticle\u002FSecurity-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs","Ivanti",[53],"Vendor Advisory",1,[56],{"id":57,"name":57,"description":58},"Unknown","NVD-CWE-noinfo",false,[],{"title":62,"metaDescription":63,"keywords":64,"canonicalUrl":65,"structuredData":66},"What is CVE-2024-37398? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2024-37398, a high severity cyber security vulnerability from 2024. Insufficient validation in Ivanti Secure Access Client befo...","CVE-2024-37398, CVE-2024-37398 vulnerability, CVE-2024-37398 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, ivanti security, secure_access_client vulnerability","\u002Fwhat-is\u002Fcve-2024-37398",{"@context":67,"@type":68,"headline":62,"description":63,"datePublished":9,"dateModified":10,"author":69,"publisher":73,"about":77,"mainEntityOfPage":81,"articleSection":84,"keywords":85},"https:\u002F\u002Fschema.org","TechArticle",{"@type":70,"name":71,"url":72},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":70,"name":71,"url":72,"logo":74},{"@type":75,"url":76},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":78,"name":6,"description":79,"additionalType":80},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":82,"@id":83},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2024-37398","Cybersecurity","CVE-2024-37398, CVE-2024-37398 vulnerability, CVE-2024-37398 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[87],{"Operator":25,"Negate":25,"Nodes":88},[89],{"Operator":90,"Negate":25,"CPEMatch":91},"OR",[92,94,96,99,102],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":93,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":45,"VersionEndIncluding":25},"2347060E-FEC7-41EF-A0C0-5ED61B157223",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":95,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"C419EC4C-AB98-4D73-82B2-00A0A1F5A435",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":98,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:ivanti:secure_access_client:22.7:r1:*:*:*:*:*:*","F78C1CDE-FB11-4033-AEBA-D04D937EDD67",{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":101,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:ivanti:secure_access_client:22.7:r2:*:*:*:*:*:*","E881D4BF-3222-4EF9-8A9B-0948973CCC89",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":104,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"cpe:2.3:a:ivanti:secure_access_client:22.7:r3:*:*:*:*:*:*","D93F7D15-B61D-4EE7-9280-FC0B7C45C940",[],[],{"lastModified":10,"cacheTime":108,"version":109},1793230706888,"2.0",{"score":111,"band":112,"action":113,"scoredAt":114},46,"Medium","Plan remediation","2026-10-28T07:04:44.455222+00:00"]