7.8
Élevée
CVE-2024-9845 Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local…
Description
Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privilege escalation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Automation 2024.4 | premières → < 2024.4.0.1 | 2024.4.0.1 |
Autres CVE de Automation
Les 8 CVE de Automation →
CVE-2024-38656
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version…
9.1
Critique
CVE-2024-8320
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a…
5.3
Moyenne
CVE-2024-44106
Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2…
8.8
Élevée
CVE-2024-44105
Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version…
8.2
Élevée