CVE-2024-9842
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Nov 12, 2024
Updated: Nov 13, 2024
Summary
CVE-2024-9842 is a newly disclosed vulnerability affecting Ivanti Secure Access Client versions prior to 22.7R4. This issue stems from incorrect permissions, enabling a local authenticated attacker to create arbitrary folders. The attacker can potentially exploit this vulnerability to modify or manipulate data, leading to potential security risks or data breaches. Organizations using Ivanti Secure Access Client are advised to update to the latest version as soon as possible to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Ivanti Secure Access Client