NetSight
high7.1

CVE-2025-10918

Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files any…

Impact

Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on disk

Affected products

VendorProductAffected versions
IvantiEndpoint Manager
before 2024
Version 2024

Weakness classification

References