high7.8
CVE-2024-9167
Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local …
Impact
Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Velocity License Server | from 5.1 before 5.2 |