CVE-2024-29211: Race Condition
Published Nov 13, 2024
·Updated
A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify sensitive configuration files.
Affected Software
5 affected components
Ivanti Secure Access Client<22.7
Ivanti Secure Access Client=22.7
Ivanti Secure Access Client=22.7-r1
Ivanti Secure Access Client=22.7-r2
Ivanti Secure Access Client=22.7-r3
Event History
Nov 13, 2024
CVE Published
via MITRE·01:54 AM
Data Sourced
via MITRE·01:54 AM
DescriptionSeverity
Data Sourced
via NVD·02:15 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-29211?
CVE-2024-29211 is rated as high severity due to its potential for local authenticated attackers to manipulate sensitive configuration files.
2
How do I fix CVE-2024-29211?
To fix CVE-2024-29211, upgrade to Ivanti Secure Access Client version 22.7R4 or later.
3
Who is affected by CVE-2024-29211?
CVE-2024-29211 affects all versions of Ivanti Secure Access Client prior to version 22.7R4.
4
What attack vector is involved in CVE-2024-29211?
CVE-2024-29211 involves a local attack vector that requires authenticated access to the affected system.
5
What can an attacker do with CVE-2024-29211?
An attacker exploiting CVE-2024-29211 can modify sensitive configuration files, potentially leading to further exploitation of the system.