CVE-2024-29211: Race Condition
A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify sensitive configuration files.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti Secure Access Clientto a version that resolves this vulnerability.Fixed in 22.7R4
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29211?
CVE-2024-29211 is rated as high severity due to its potential for local authenticated attackers to manipulate sensitive configuration files.
How do I fix CVE-2024-29211?
To fix CVE-2024-29211, upgrade to Ivanti Secure Access Client version 22.7R4 or later.
Who is affected by CVE-2024-29211?
CVE-2024-29211 affects all versions of Ivanti Secure Access Client prior to version 22.7R4.
What attack vector is involved in CVE-2024-29211?
CVE-2024-29211 involves a local attack vector that requires authenticated access to the affected system.
What can an attacker do with CVE-2024-29211?
An attacker exploiting CVE-2024-29211 can modify sensitive configuration files, potentially leading to further exploitation of the system.