high7.8
CVE-2024-13164
An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated att…
Impact
An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Endpoint Manager | before 2022 Versions 2022, 2024 |