CVE-2024-3029

In mintplex-labs/anything-llm, an attacker can exploit improper input validation by sending a malformed JSON payload to the '/system/enable-multi-user' endpoint. This triggers an error that is caught by a catch block, which in turn deletes all users and disables the 'multiusermode'. The...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-11598

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality...

CVE-2024-10630

CVE-2024-10630 affects Ivanti Application Control Engine. A race condition in versions prior to 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality. The issue is documented across multiple sources (Ivanti security advisory, Red Hat/CISA entries, PT-sec...

Security Advisory - Ivanti Application Control Engine (CVE-2024-10630)

Summary Ivanti has released updates for Ivanti Application Control Engine which address a high severity vulnerability. Successful exploitation could lead to bypassing configured protections. We are not aware of any customers being exploited by this vulnerability at the time of disclosure...

Ivanti Releases Security Updates for Multiple Products

Ivanti released security updates to address vulnerabilities in Ivanti Avalanche, Ivanti Application Control Engine, and Ivanti EPM. CISA encourages users and administrators to review the following Ivanti security advisories and apply the necessary guidance and updates: Ivanti Avalanchelink is...

Ivanti Application Control 安全漏洞

Ivanti Application Control is an application control software from Ivanti Corporation, USA. A security vulnerability previously existed in Ivanti Application Control version 10.14.4.0, which stemmed from the inclusion of a race condition issue. Allowing a locally authenticated attacker to exploit...

PT-2025-1601 · Ivanti · Ivanti Application Control Engine

Name of the Vulnerable Software and Affected Versions: Ivanti Application Control Engine versions prior to 10.14.4.0 Description: A race condition in the software allows a local authenticated attacker to bypass the application blocking functionality. Recommendations: For versions prior to...

CVE-2024-11598

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-11598

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-11598

Ivanti Application Control is affected by CVE-2024-11598 due to insecure permissions that enable local privilege escalation for a local authenticated attacker. Affected versions are pre-2024.3 HF1, pre-2024.1 HF2, and pre-2023.3 HF3. Mitigation: upgrade to 2024.3 HF1, 2024.1 HF4, or 2023.3 HF3, r...

CVE-2024-11598

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-11598

Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation...

Ivanti Application Control 安全漏洞

Ivanti Application Control is an application control software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Application Control that stems from improper privilege management. An attacker can exploit the vulnerability to elevate privileges...

PT-2024-17128 · Ivanti · Ivanti Application Control

Name of the Vulnerable Software and Affected Versions: Ivanti Application Control versions prior to 2024.3 HF1 Ivanti Application Control versions prior to 2024.1 HF2 Ivanti Application Control versions prior to 2023.3 HF3 Description: Under specific circumstances, insecure permissions in Ivanti...

December 2024 Security Advisory Ivanti Application Control (CVE-2024-11598)

Summary Ivanti has released updates for Ivanti Application Control which address one high severity vulnerability. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CVE Number| Description| CVSS Score Severity| CVSS Vector| CW...

The vulnerability of Windows Defender Application Control (WDAC) on Windows operating systems allows attackers to circumvent existing security restrictions.

The vulnerability of Windows Defender Application Control WDAC on Windows operating systems relates to a flaw in the data protection mechanism. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...