7.8
High
CVE-2024-9167 Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local…
Description
Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Velocity License Server 5.2 | earliest → < 5.2 | 5.2 |
| velocity_license_server | 5.2 | No fix stated |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified