CVE-2024-8496

Ivanti Workspace Control contains an elevation-of-privilege flaw due to insecure permissions in versions before 10.18.40.0. A local authenticated attacker could exploit this to achieve local privilege escalation (CVSS 3.1: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H; base score 7.8). The issue is address...

CVE-2024-8496

Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-8496

Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-9845

CVE-2024-9845 affects Ivanti Automation prior to 2024.4.0.1. The issue is due to insecure permissions, enabling a local authenticated attacker to achieve local privilege escalation. The CVSS is 3.1/3.0-based vectors with a base score of 7.8 (HIGH) and local access requirements. Remediation: upgra...

CVE-2024-9845

Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-9845

Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-10251

Under specific circumstances, insecure permissions in Ivanti Security Controls before version 2024.4.1 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-10251

Under specific circumstances, insecure permissions in Ivanti Security Controls before version 2024.4.1 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-10251

Ivanti Security Controls is affected on versions prior to 2024.4.1. The issue stems from insecure permissions in the Ivanti Security Controls console that, under specific circumstances, could allow a local authenticated attacker to escalate privileges. The CVE-2024-10251 entry lists a base score ...

December 2024 Security Advisory Ivanti Performance Manager (CVE-2024-11597)

Summary Ivanti has released updates for Performance Manager which address one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CV...

Security Advisory - Ivanti Security Controls (ISeC) (CVE-2024-10251)

Security Advisory Ivanti Security Controls iSec CVE-2024-10251 Summary Ivanti has released an update for the Ivanti Security Controls console which addresses one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being...

Ivanti Issues Critical Security Updates for CSA and Connect Secure Vulnerabilities

Ivanti has released security updates to address multiple critical flaws in its Cloud Services Application CSA and Connect Secure products that could lead to privilege escalation and code execution. The list of vulnerabilities is as follows - CVE-2024-11639 CVSS score: 10.0 - An authentication...

PT-2024-16138 · Ivanti · Ivanti Security Controls

Name of the Vulnerable Software and Affected Versions: Ivanti Security Controls versions prior to 2024.4.1 Description: The issue is related to insecure permissions in Ivanti Security Controls. Under specific circumstances, this allows a local authenticated attacker to achieve local privilege...

Ivanti Security Control 安全漏洞

Ivanti security controls is a unified IT management platform from US-based Ivanti Inc. It is used to manage and protect Windows-based computers, Linux-based computers and VMware ESXi virtual machine monitoring programs. Ivanti security controls suffers from an elevation of privilege vulnerability...

Ivanti Application Control 安全漏洞

Ivanti Application Control is an application control software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Application Control that stems from improper privilege management. An attacker can exploit the vulnerability to elevate privileges...

Ivanti Performance Manager 安全漏洞

Ivanti Performance Manager is a server and application performance management software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Performance Manager that stems from improper privilege management. An attacker could exploit the vulnerability to elevate privileges...

Ivanti Workspace Control 安全漏洞

Ivanti Workspace Control is a desktop management solution from Ivanti. Ivanti Workspace Control suffers from an elevation of privilege vulnerability that originates from an insecure privilege setting. An attacker can exploit the vulnerability to elevate privileges...

PT-2024-39056 · Ivanti · Ivanti Workspace Control

Name of the Vulnerable Software and Affected Versions: Ivanti Workspace Control versions prior to 10.18.40.0 Description: Under specific circumstances, insecure permissions in Ivanti Workspace Control allow a local authenticated attacker to achieve local privilege escalation. Recommendations: For...

Ivanti Automation 安全漏洞

Ivanti Automation is an application from US-based Ivanti, Inc. It simplifies the management of complex hybrid environments by automating infrastructure, cloud and workspace automation. A security vulnerability exists in Ivanti Automation versions prior to 2024.4.0.1 that stems from improper...

PT-2024-39883 · Ivanti · Ivanti Automation

Name of the Vulnerable Software and Affected Versions: Ivanti Automation versions prior to 2024.4.0.1 Description: Under specific circumstances, insecure permissions in Ivanti Automation allow a local authenticated attacker to achieve local privilege escalation. Recommendations: For versions prio...