Authenticated administrator escalation via undisclosed web flaw

Privilege escalation in Ivanti Connect Secure and Policy Secure 9.x and 22.x allows remote authenticated users to gain administrator rights. The affected web component improperly grants elevated privileges, but Ivanti has not disclosed the request path, parameter, or faulty authorization operation. A low-privileged account and network access to the gateway are required; successful exploitation yields administrator control over the appliance.