Skip to content
fr Sign in
7.8 High

CVE-2024-29821 Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due…

Description

Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.

Affected products and versions

Product Affected versions Fixed in
DSM 2024.2 earliest → < 2024.2 2024.2
desktop_\&_server_management 2024.2 earliest → < 2024.2 2024.2

References

Timeline

  1. Published
  2. Last modified

Other CVEs of DSM

The 3 CVEs of DSM →
CVE-2024-38648 A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt… 9.0 Critical CVE-2024-29213 Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due… 7.8 High
Track this CVE