7.1
High
CVE-2024-10256 Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete…
Description
Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Patch SDK 9.7 | earliest → < 9.7.703 | 9.7.703 |
| Endpoint Manager | Versions not published | |
| Security Controls 2024.4 | earliest → < 2024.4 | 2024.4 |
| Patch for Configuration Manager 2024.4 | earliest → < 2024.4 | 2024.4 |
| Neurons for Patch Management 2024.4 | earliest → < 2024.4 | 2024.4 |
| Neurons Agent Platform 2024.4 | earliest → < 2024.4 | 2024.4 |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified