Boletines de Vulnerabilidades

CVE-2024-39709

   
Software afectado IVANTI
 
Incorrect file permissions in Ivanti Connect Secure before version 22.6R2 (Not Applicable to 9.1Rx) and Ivanti Policy Secure before version 22.7R1 (Not Applicable to 9.1Rx) allow a local authenticated attacker to escalate their privileges.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2024-39709