NetSight
high7.8

CVE-2024-10630

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functio…

Impact

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality.

Affected products

VendorProductAffected versions
IvantiApplication Control
before 2023.3
Versions 2023.3, 2024.1, 2024.3
IvantiSecurity Controls
through 2024.4.1

Weakness classification

References