KB44987 - (CVE-2021-4034) - Local privilege escalation vulnerability was found on polkit's pkexec utility

A Local privilege escalation vulnerability on polkit's pkexec utility has been reported on the 25th of January, 2022. 

More details can be found in the links below,

https://access.redhat.com/security/cve/CVE-2021-4034
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4034

 

Ivanti Pulse Engineering teams have completed their investigation and the complete results are updated in the table below. 
 

Product	Impact
Pulse Secure Virtual Traffic Manager	Not Affected*
Pulse Secure Services Director	Not Exploitable**
Pulse Secure Web Application Firewall	Not Affected*
Pulse Connect Secure	Not Affected*
Ivanti Connect Secure (ICS)	Not Affected*
Pulse Policy Secure	Not Affected*
Pulse Desktop Client	Not Affected*
Pulse Mobile Client	Not Affected*
Pulse One	Not Affected*
Pulse ZTA	Not Affected*
Ivanti Neurons for ZTA	Not Affected*
Ivanti Neurons for secure Access	Not Affected*

Note:
* polkit's pkexec utility not used.
** polkit's pkexec utility used is polkit-0.96-11.el6_10.1