CVE-2024-38648

Description

References

• forums.ivanti.com/s/article/SA-2024-07-12-CVE-2024-38648 · Vendor Advisory

Autres vulnérabilités de desktop & server management

• CVE-2026-3483ÉLEVÉE 7.8An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges.
• CVE-2024-7572ÉLEVÉE 7.1Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files.
• CVE-2024-29821ÉLEVÉE 7.8Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via uns…
• CVE-2024-29213ÉLEVÉE 7.8Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via uns…
• CVE-2023-28129ÉLEVÉE 7.8DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installatio…