PT-2024-22814

CVE-2024-29213

·

Published

2024-10-18

·

Updated

2024-10-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Ivanti DSM versions prior to 2024.2
Description The issue allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via an unspecified attack vector.
Recommendations For Ivanti DSM versions prior to 2024.2, update to version 2024.2 or later to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-863: Incorrect Authorization
Related identifiers
CVE-2024-29213
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com