PT-2024-8595 · Ivanti · Ivanti Endpoint Manager

Published 2024-05-09 · Updated 2024-11-14 · CVE-2024-34787

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions prior to 2024 November Security Update Ivanti Endpoint Manager versions prior to 2022 SU6 November Security Update

Description The issue is related to path traversal in Ivanti Endpoint Manager, which is caused by incorrect restriction of the path name to a directory with limited access. This allows a local unauthenticated attacker to achieve code execution, but user interaction is required.

Recommendations For versions prior to 2024 November Security Update, update to the 2024 November Security Update to resolve the issue. For versions prior to 2022 SU6 November Security Update, update to the 2022 SU6 November Security Update to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-10164

CVE-2024-34787

ZDI-24-1501

Affected Products

Ivanti Endpoint Manager

References · 10

• https://zerodayinitiative.com/advisories/ZDI-24-1501 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-34787 · Security Note
• https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-34787 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10164 · Security Note
• https://twitter.com/CVEnew/status/1856694239893332294 · Twitter Post
• https://twitter.com/CharyyevPerman/status/1856922185870578009 · Twitter Post
• https://forums.ivanti.com/s/article/Security-Advisory-EPM-November-2024-for-EPM-2024-and-EPM-2022?language=en_US · Note
• https://vuldb.com/?id.284314 · Note
• https://t.me/cvedetector/10783 · Telegram Post