CVE-2024-29213: High severity Ivanti DSM vulnerability
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti DSMto a version that resolves this vulnerability.Fixed in 2024.2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29213?
CVE-2024-29213 is considered a high severity vulnerability due to the potential for authenticated users to execute code with elevated privileges.
How do I fix CVE-2024-29213?
To mitigate CVE-2024-29213, upgrade Ivanti DSM to version 2024.2 or later to ensure secure access control lists are in place.
Who is affected by CVE-2024-29213?
CVE-2024-29213 affects users of Ivanti DSM versions prior to 2024.2 on local machines.
What type of vulnerability is CVE-2024-29213?
CVE-2024-29213 is classified as a code execution vulnerability due to insecure access control settings.
What are the potential risks of CVE-2024-29213?
The risks of CVE-2024-29213 include unauthorized code execution and possible system compromise by authenticated users.