CVE-2024-50324

Summary

CVE-2024-50324 is a newly disclosed vulnerability affecting Ivanti Endpoint Manager versions before the November 2024 Security Update and 2022 SU6. This issue permits a remote, authenticated attacker with administrative privileges to execute arbitrary code by exploiting a path traversal vulnerability. By manipulating the file path during data transfers, the attacker can gain unauthorized access to system files and potentially execute malicious code. This vulnerability poses a significant risk, particularly in enterprise environments, where administrative access is frequently required. Organizations using the affected Ivanti Endpoint Manager versions are strongly advised to apply the available security updates as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.