CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-10251

Under specific circumstances, insecure permissions in Ivanti Security Controls before version 2024.4.1 allows a local authenticated attacker to achieve local privilege escalation.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 11.5%

CVSS Severity

CVSS v3 Score 7.8

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Security-Controls-iSec-CVE-2024-10251

Products affected by CVE-2024-10251

Ivanti » Security Controls » Version: N/A

cpe:2.3:a:ivanti:security_controls:-
Ivanti » Security Controls » Version: 2023.1

cpe:2.3:a:ivanti:security_controls:2023.1
Ivanti » Security Controls » Version: 2023.1.1

cpe:2.3:a:ivanti:security_controls:2023.1.1
Ivanti » Security Controls » Version: 2023.2

cpe:2.3:a:ivanti:security_controls:2023.2
Ivanti » Security Controls » Version: 2023.3

cpe:2.3:a:ivanti:security_controls:2023.3
Ivanti » Security Controls » Version: 2023.4

cpe:2.3:a:ivanti:security_controls:2023.4
Ivanti » Security Controls » Version: 2023.4.1

cpe:2.3:a:ivanti:security_controls:2023.4.1
Ivanti » Security Controls » Version: 2024.1

cpe:2.3:a:ivanti:security_controls:2024.1
Ivanti » Security Controls » Version: 2024.2

cpe:2.3:a:ivanti:security_controls:2024.2
Ivanti » Security Controls » Version: 2024.2.1

cpe:2.3:a:ivanti:security_controls:2024.2.1
Ivanti » Security Controls » Version: 2024.2.2

cpe:2.3:a:ivanti:security_controls:2024.2.2
Ivanti » Security Controls » Version: 2024.3

cpe:2.3:a:ivanti:security_controls:2024.3
Ivanti » Security Controls » Version: 2024.3.1

cpe:2.3:a:ivanti:security_controls:2024.3.1
Ivanti » Security Controls » Version: 2024.3.2

cpe:2.3:a:ivanti:security_controls:2024.3.2
Ivanti » Security Controls » Version: 2024.4

cpe:2.3:a:ivanti:security_controls:2024.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-10251

Products

Pricing

Contact Us