Path Traversal Vulnerability in Ivanti Endpoint Manager

CVE-2024-50324

Summary

A path traversal vulnerability exists in Ivanti Endpoint Manager that permits a remote authenticated attacker with administrative privileges to gain unauthorized access and execute arbitrary code. This flaw impacts versions of the product released prior to the November 2024 Security Update, as well as versions before the November 2022 SU6. Attackers can exploit this vulnerability to bypass security settings, potentially leading to severe ramifications for system integrity and data protection. Timely updates and security patches are crucial to mitigating this risk.

References