Description
Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ivanti | Patch SDK | — | 9.7.703 |
| Ivanti | Endpoint Manager | — | 2024 November Security Update |
| Ivanti | Security Controls | — | 2024.4 |
| Ivanti | Patch for Configuration Manager | — | 2024.4 |
| Ivanti | Neurons for Patch Management | — | 2024.4 |
| Ivanti | Neurons Agent Platform | — | 2024.4 |
Advisories 1
- WID-SEC-2024-3671 Ivanti Patch SDK: Schwachstelle ermöglicht Löschen von Dateien BSI CERT-Bund (WID) · Dec 10, 2024