CVE-2024-8540 | THREATINT

Description

Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components.

Reserved 2024-09-06 | Published 2024-12-10 | Updated 2024-12-14 | Assigner ivanti

HIGH: 8.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Problem types

CWE-732 Incorrect Permission Assignment for Critical Resource

Product status

Default status

affected

9.20.2

unaffected

10.0.2

unaffected

10.1.0

unaffected

References

forums.ivanti.com/...ty-Advisory-Ivanti-Sentry-CVE-2024-8540

cve.org (CVE-2024-8540)

nvd.nist.gov (CVE-2024-8540)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase

Subscribe to our newsletter to learn more about our work.