Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-10256

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ivanti

Description

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ivanti Patch SDK

Default version status: affected

  • 9.7.703unaffected

Ivanti Endpoint Manager

Default version status: affected

  • 2024 November Security Updateunaffected
  • 2022 SU6 November Security Updateunaffected

Ivanti Security Controls

Default version status: affected

  • 2024.4unaffected

Ivanti Patch for Configuration Manager

Default version status: affected

  • 2024.4unaffected

Ivanti Neurons for Patch Management

Default version status: affected

  • 2024.4unaffected

Ivanti Neurons Agent Platform

Default version status: affected

  • 2024.4unaffected

References