CVE-2024-50329

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Nov 12, 2024
Updated: Nov 13, 2024
CWE ID 22

Summary

CVE-2024-50329 is a newly disclosed vulnerability in Ivanti Endpoint Manager. This issue, which affects versions prior to the November 2024 Security Update and 2022 SU6, allows unauthenticated attackers to execute remote code through a path traversal vulnerability. User interaction is required to exploit this weakness, making it a potential threat to organizations that rely on Ivanti Endpoint Manager for endpoint management. It is crucial that users install the latest security updates as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share