Path Traversal Vulnerability in Ivanti Endpoint Manager
CVE-2024-50322

7.8HIGH

Key Information:

Vendor

Ivanti
Status
Endpoint Manager
Vendor
CVE Published:
12 November 2024

What is CVE-2024-50322?

A path traversal vulnerability exists in Ivanti Endpoint Manager that enables a local unauthenticated attacker to execute arbitrary code on affected systems. The vulnerability specifically arises due to improper validation of file paths in the application. An attacker must interact with the system to exploit this flaw, thereby posing a risk to systems running vulnerable versions of the software. It is crucial for organizations using Ivanti Endpoint Manager to apply the relevant security updates to mitigate potential threats.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Endpoint Manager 2024 November Security Update

Endpoint Manager 2024 November Security Update

Endpoint Manager 2022 SU6 November Security Update

References

https://https://forums.ivanti.com/s/article/Security-Advi...

EPSS Score

14% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.