CVE-2024-7612

Summary

CVE-2024-7612 is a newly disclosed cybersecurity vulnerability affecting Ivanti Endpoint Management Manager (EPMM) versions prior to 12.1.0.4. This issue arises from insecure permissions, enabling a local authenticated attacker to manipulate sensitive application components. The attacker can potentially exploit this vulnerability to gain unauthorized control or access to critical system functionalities, posing a significant risk to organizational security. It is essential that Ivanti EPMM users upgrade to the latest version to mitigate this threat and maintain the security of their systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.