high7.8
CVE-2024-11597
Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authentica…
Impact
Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Performance Manager | before 2023.3 Versions 2023.3, 2024.1, 2024.3 |