CVE-2024-29213

State: Published
Severity: 7.8 High
Published: Oct 18, 2024
Updated: Oct 21, 2024
Reserved: Mar 19, 2024

Description

Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.

Scores

CVSS	Score	Vector	Source
3.0	7.8 High	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	hackerone

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
DSMIvanti	2024.2 to before 2024.2Affected

References

https://forums.ivanti.com/s/article/SA-2024-07-12-CVE-2024-29213

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.