Insecure Permissions in Ivanti Performance Manager Could Lead to Local Privilege Escalation

CVE-2024-11597

What is CVE-2024-11597?

A security vulnerability in Ivanti Performance Manager allows local authenticated users to exploit insecure permissions present in the software. This situation can lead to a local privilege escalation, enabling an attacker to gain elevated access to system resources. Versions of Ivanti Performance Manager prior to 2024.3 HF1, 2024.1 HF1, and 2023.3 HF1 are particularly affected by this issue, highlighting the importance of updating to secure versions to mitigate the associated risks. For further details, refer to the Ivanti security advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References