Vulnerability Details CVE-2024-10630
A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.4%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2024-10630
-
cpe:2.3:a:ivanti:application_control:*
-
cpe:2.3:a:ivanti:application_control:-
-
cpe:2.3:a:ivanti:application_control:2023.3
-
cpe:2.3:a:ivanti:application_control:2024.1
-
cpe:2.3:a:ivanti:application_control:2024.3
-
cpe:2.3:a:ivanti:security_controls:-
-
cpe:2.3:a:ivanti:security_controls:2023.1
-
cpe:2.3:a:ivanti:security_controls:2023.1.1
-
cpe:2.3:a:ivanti:security_controls:2023.2
-
cpe:2.3:a:ivanti:security_controls:2023.3
-
cpe:2.3:a:ivanti:security_controls:2023.4
-
cpe:2.3:a:ivanti:security_controls:2023.4.1
-
cpe:2.3:a:ivanti:security_controls:2024.1
-
cpe:2.3:a:ivanti:security_controls:2024.2
-
cpe:2.3:a:ivanti:security_controls:2024.2.1
-
cpe:2.3:a:ivanti:security_controls:2024.2.2
-
cpe:2.3:a:ivanti:security_controls:2024.3
-
cpe:2.3:a:ivanti:security_controls:2024.3.1
-
cpe:2.3:a:ivanti:security_controls:2024.3.2
-
cpe:2.3:a:ivanti:security_controls:2024.4
-
cpe:2.3:a:ivanti:security_controls:2024.4.1