CVE-2024-10256

No fix known EPSS <1%CVSS 7.1

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.

Published 2024-12-10 · CVE record · OSV

Products: Ivanti Patch SDK, ivanti endpoint_manager, Ivanti Security Controls, Ivanti Patch for Configuration Manager, Ivanti Neurons for Patch Management, Ivanti Neurons Agent Platform