CVE-2024-29821: High severity Ivanti DSM vulnerability
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti DSMto a version that resolves this vulnerability.Fixed in 2024.2
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29821?
CVE-2024-29821 has a critical severity level due to its potential for code execution with elevated privileges.
How do I fix CVE-2024-29821?
To fix CVE-2024-29821, upgrade Ivanti DSM to version 2024.2 or later.
Who is affected by CVE-2024-29821?
CVE-2024-29821 affects users running Ivanti DSM versions prior to 2024.2 on the local machine.
What are the potential impacts of CVE-2024-29821?
The potential impacts of CVE-2024-29821 include unauthorized code execution and compromise of system integrity.
Is there a workaround for CVE-2024-29821?
No specific workarounds are documented for CVE-2024-29821; updating the software is the recommended solution.