Ivanti Cloud Services Application Privilege Escalation Vulnerability

A local authenticated attacker can escalate privileges in Ivanti Cloud Services Application versions through 5.0.4 due to default credentials. This vulnerability has been assigned a CVSS score of 7.8, indicating high severity.

Impact

Exploitation of this vulnerability allows for local privilege escalation, enabling an authenticated attacker to gain elevated rights within the application.

Remediation

Users should update to Ivanti Cloud Services Application version 5.0.5. However, it is important to note that the fix is not automatically applied when upgrading to this version. Customers should either perform a fresh installation of version 5.0.5 or follow the specific mitigation steps outlined in the Ivanti Security Advisory to properly apply the fix.