Path Traversal Vulnerability in Ivanti Endpoint Manager

CVE-2024-50322

Summary

A path traversal vulnerability exists in Ivanti Endpoint Manager that enables a local unauthenticated attacker to execute arbitrary code on affected systems. The vulnerability specifically arises due to improper validation of file paths in the application. An attacker must interact with the system to exploit this flaw, thereby posing a risk to systems running vulnerable versions of the software. It is crucial for organizations using Ivanti Endpoint Manager to apply the relevant security updates to mitigate potential threats.

References