7.8
High
CVE-2024-9845 Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local…
Description
Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privilege escalation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Automation 2024.4 | earliest → < 2024.4.0.1 | 2024.4.0.1 |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Automation
The 8 CVEs of Automation →
CVE-2024-38656
Argument injection in Ivanti Connect Secure before version 22.7R2.2 and 9.1R18.9 and Ivanti Policy Secure before version…
9.1
Critical
CVE-2024-8320
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a…
5.3
Medium
CVE-2024-44106
Insufficient server-side controls in the management console of Ivanti Workspace Control before version 2025.2…
8.8
High
CVE-2024-44105
Cleartext transmission of sensitive information in the management console of Ivanti Workspace Control before version…
8.2
High