high7.1
CVE-2024-10256
Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.
Impact
Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Endpoint Manager | Versions 2022, 2024 |
| Ivanti | Neurons Agent Platform | before 2024.4 |
| Ivanti | Neurons For Patch Management | before 2024.4 |
| Ivanti | Patch For Configuration Manager | before 2024.4 |
| Ivanti | Patch Software Development Kit | before 9.7.703 |
| Ivanti | Security Controls | before 2024.4 |