Boletines de Vulnerabilidades

CVE-2024-9167

   
Software afectado IVANTI
 
Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2024-9167