Insecure Permissions in Ivanti EPMM Allow Unauthorized Access to Sensitive Configuration Files

CVE-2024-7612

Summary

The vulnerability in Ivanti Endpoint Manager Mobile (EPMM) arises from improperly configured permissions that potentially allow a local authenticated attacker to modify sensitive application components. With this flaw, an attacker who has legitimate access can leverage the vulnerabilities to alter critical settings and functionalities, posing significant risks to system integrity and user data security. Immediate actions to rectify permissions are essential to mitigate these risks and enhance the overall security posture of the application.

References