CVE-2024-29213

Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.

Score

CVSS 3.0 7.8 High

Status

Analyzed - support@hackerone.com

Published

2024-10-18

Last modified

2024-10-21

Weaknesses

CWE-863

Affected products

• Desktop & Server Management (Ivanti)
• Dsm (Ivanti)

References

• https://forums.ivanti.com/s/article/SA-2024-07-12-CVE-2024-29213