Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.
Metrics
Affected Vendors & Products
References
History
Tue, 10 Dec 2024 21:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Metrics |
ssvc
|
Tue, 10 Dec 2024 19:00:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files. | |
Weaknesses | CWE-732 | |
References |
| |
Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ivanti
Published: 2024-12-10T18:46:01.911Z
Updated: 2024-12-10T20:44:59.599Z
Reserved: 2024-10-22T18:48:36.997Z
Link: CVE-2024-10256
Vulnrichment
Updated: 2024-12-10T20:44:55.649Z
NVD
Status : Received
Published: 2024-12-10T19:15:19.280
Modified: 2024-12-10T19:15:19.280
Link: CVE-2024-10256
Redhat
No data.