Vulnerability-Lookup

CVE-2024-10256 (GCVE-0-2024-10256)

Vulnerability from cvelistv5 – Published: 2024-12-10 18:46 – Updated: 2024-12-10 20:44

Summary

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.

Severity

7.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-12-10 20:44 UTC

CWE

CWE-732 - Incorrect Permission Assignment for Critical Resource

Assigner

ivanti mitre root

References

1 reference

URL	Tags
https://forums.ivanti.com/s/article/Security-Advi…

Impacted products

6 products

Vendor	Product	Version	CPE status
Ivanti	Patch SDK	Unaffected: 9.7.703	guessed
Ivanti	Endpoint Manager	Unaffected: 2024 November Security Update (custom) Unaffected: 2022 SU6 November Security Update (custom)	guessed
Ivanti	Security Controls	Unaffected: 2024.4 (custom)	guessed
Ivanti	Patch for Configuration Manager	Unaffected: 2024.4 (custom)	guessed
Ivanti	Neurons for Patch Management	Unaffected: 2024.4 (custom)	guessed
Ivanti	Neurons Agent Platform	Unaffected: 2024.4 (custom)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-10256",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-10T20:44:51.647383Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-10T20:44:59.599Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Patch SDK",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "9.7.703"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Endpoint Manager",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "2024 November Security Update",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2022 SU6 November Security Update",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Security Controls",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "2024.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Patch for Configuration Manager",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "2024.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Neurons for Patch Management",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "2024.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Neurons Agent Platform",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "2024.4",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eInsufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;\u003c/span\u003e"
            }
          ],
          "value": "Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-180",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-732",
              "description": "CWE-732 Incorrect Permission Assignment for Critical Resource",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-10T18:46:01.911Z",
        "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "shortName": "ivanti"
      },
      "references": [
        {
          "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Patch-SDK-CVE-2024-10256"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
    "assignerShortName": "ivanti",
    "cveId": "CVE-2024-10256",
    "datePublished": "2024-12-10T18:46:01.911Z",
    "dateReserved": "2024-10-22T18:48:36.997Z",
    "dateUpdated": "2024-12-10T20:44:59.599Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2024-10256",
      "date": "2026-09-19",
      "epss": "0.00211",
      "percentile": "0.11695"
    },
    "fkie_nvd": {
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files."
        },
        {
          "lang": "es",
          "value": "Los permisos insuficientes en Ivanti Patch SDK anterior a la versi\u00f3n 9.7.703 permiten que un atacante autenticado local elimine archivos arbitrarios."
        }
      ],
      "id": "CVE-2024-10256",
      "lastModified": "2024-12-10T19:15:19.280",
      "metrics": {
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 1.8,
            "impactScore": 5.2,
            "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
            "type": "Secondary"
          }
        ]
      },
      "published": "2024-12-10T19:15:19.280",
      "references": [
        {
          "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
          "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Patch-SDK-CVE-2024-10256"
        }
      ],
      "sourceIdentifier": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
      "vulnStatus": "Awaiting Analysis",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-732"
            }
          ],
          "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
          "type": "Secondary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "affected",
                "product": "Patch SDK",
                "vendor": "Ivanti",
                "versions": [
                  {
                    "status": "unaffected",
                    "version": "9.7.703"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Endpoint Manager",
                "vendor": "Ivanti",
                "versions": [
                  {
                    "status": "unaffected",
                    "version": "2024 November Security Update",
                    "versionType": "custom"
                  },
                  {
                    "status": "unaffected",
                    "version": "2022 SU6 November Security Update",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Security Controls",
                "vendor": "Ivanti",
                "versions": [
                  {
                    "status": "unaffected",
                    "version": "2024.4",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Patch for Configuration Manager",
                "vendor": "Ivanti",
                "versions": [
                  {
                    "status": "unaffected",
                    "version": "2024.4",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Neurons for Patch Management",
                "vendor": "Ivanti",
                "versions": [
                  {
                    "status": "unaffected",
                    "version": "2024.4",
                    "versionType": "custom"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Neurons Agent Platform",
                "vendor": "Ivanti",
                "versions": [
                  {
                    "status": "unaffected",
                    "version": "2024.4",
                    "versionType": "custom"
                  }
                ]
              }
            ],
            "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:-:*:*:*:*:*:*",
                    "matchCriteriaId": "46580865-5177-4E55-BDAC-73DA4B472B35",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su1:*:*:*:*:*:*",
                    "matchCriteriaId": "E57E12B5-B789-450C-9476-6C4C151E6993",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su2:*:*:*:*:*:*",
                    "matchCriteriaId": "E47C65B3-56DD-4D65-8B4B-6AFFE28E94F2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su3:*:*:*:*:*:*",
                    "matchCriteriaId": "10D6EAB7-B14B-45E9-92B9-4FADFBBB08AF",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su4:*:*:*:*:*:*",
                    "matchCriteriaId": "1877FB55-76BA-4714-ABB8-47258132F537",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su5:*:*:*:*:*:*",
                    "matchCriteriaId": "4F9E8D45-5F12-4D45-A74E-C314FA3618A3",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su6:*:*:*:*:*:*",
                    "matchCriteriaId": "5BB1FEE4-8B72-42A4-A7E1-DB3B10CE5CEE",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:-:*:*:*:*:*:*",
                    "matchCriteriaId": "6C7283FE-C10A-4E37-B004-15FB0CAC49A5",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:neurons_agent_platform:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F9AB415B-32F3-498E-9B97-1A5DE832894C",
                    "versionEndExcluding": "2024.4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:neurons_for_patch_management:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "196061EB-DBDD-47D3-879E-925635F7E91D",
                    "versionEndExcluding": "2024.4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:patch_for_configuration_manager:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C6B7005-1A83-4269-AC99-1B340AA91D19",
                    "versionEndExcluding": "2024.4",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:patch_software_development_kit:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "76B31D23-C433-4E66-AA1B-DB0AB31C9CE0",
                    "versionEndExcluding": "9.7.703",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:ivanti:security_controls:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "0C441018-1D65-42AE-9500-71C7D9CD8C61",
                    "versionEndExcluding": "2024.4",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files."
          },
          {
            "lang": "es",
            "value": "Los permisos insuficientes en Ivanti Patch SDK anterior a la versi\u00f3n 9.7.703 permiten que un atacante autenticado local elimine archivos arbitrarios."
          }
        ],
        "id": "CVE-2024-10256",
        "lastModified": "2026-06-17T06:55:15.097",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.2,
              "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2024-10256",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-10T20:44:51.647383Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2024-12-10T19:15:19.280",
        "references": [
          {
            "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
            "tags": [
              "Mitigation",
              "Vendor Advisory"
            ],
            "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Patch-SDK-CVE-2024-10256"
          }
        ],
        "sourceIdentifier": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-732"
              }
            ],
            "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T19:05:20+00:00",
      "cve": "CVE-2024-10256",
      "id": "CVE-2024-10256",
      "initial_release_date": "2024-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2024-10256",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-10256.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2024-10256",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-12-10T20:44:51.647383Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-12-10T20:44:55.649Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "Patch SDK",
              "vendor": "Ivanti",
              "versions": [
                {
                  "status": "unaffected",
                  "version": "9.7.703"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "product": "Endpoint Manager",
              "vendor": "Ivanti",
              "versions": [
                {
                  "status": "unaffected",
                  "version": "2024 November Security Update",
                  "versionType": "custom"
                },
                {
                  "status": "unaffected",
                  "version": "2022 SU6 November Security Update",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "product": "Security Controls",
              "vendor": "Ivanti",
              "versions": [
                {
                  "status": "unaffected",
                  "version": "2024.4",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "product": "Patch for Configuration Manager",
              "vendor": "Ivanti",
              "versions": [
                {
                  "status": "unaffected",
                  "version": "2024.4",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "product": "Neurons for Patch Management",
              "vendor": "Ivanti",
              "versions": [
                {
                  "status": "unaffected",
                  "version": "2024.4",
                  "versionType": "custom"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "product": "Neurons Agent Platform",
              "vendor": "Ivanti",
              "versions": [
                {
                  "status": "unaffected",
                  "version": "2024.4",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eInsufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.\u003c/span\u003e\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003e\u0026nbsp;\u003c/span\u003e"
                }
              ],
              "value": "Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files."
            }
          ],
          "impacts": [
            {
              "capecId": "CAPEC-180",
              "descriptions": [
                {
                  "lang": "en",
                  "value": "CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels"
                }
              ]
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "NONE",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-732",
                  "description": "CWE-732 Incorrect Permission Assignment for Critical Resource",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-12-10T18:46:01.911Z",
            "orgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
            "shortName": "ivanti"
          },
          "references": [
            {
              "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Patch-SDK-CVE-2024-10256"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.2.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "assignerShortName": "ivanti",
        "cveId": "CVE-2024-10256",
        "datePublished": "2024-12-10T18:46:01.911Z",
        "dateReserved": "2024-10-22T18:48:36.997Z",
        "dateUpdated": "2024-12-10T20:44:59.599Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2024-AVI-1058

Vulnerability from certfr_avis - Published: - Updated:

De multiples vulnérabilités ont été découvertes dans les produits Ivanti. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Ivanti	Policy Secure (IPS)	Policy Secure (IPS) versions 22.7R1.x antérieures à 22.7R1.2
Ivanti	Sentry	Sentry versions 10.0.x antérieures à 10.0.2
Ivanti	Endpoint Manager (EPM)	Endpoint Manager versions 2022 SU6 et antérieures sans le dernier correctif publié par l'éditeur
Ivanti	Endpoint Manager (EPM)	Endpoint Manager versions 2024 et antérieures sans le dernier correctif publié par l'éditeur
Ivanti	Desktop and Server Management (DSM)	Desktop and Server Management (DSM) versions 2024.2 antérieures à 2024.3.5740
Ivanti	Sentry	Sentry versions 10.1.x antérieures à 10.1.0
Ivanti	Cloud Service Appliance (CSA)	Ivanti Cloud Services Application (CSA) versions 5.0.x antérieures à 5.0.3
Ivanti	Connect Secure (ICS)	Connect Secure (ICS) versions 22.7R2.x antérieures à 22.7R2.4
Ivanti	Sentry	Sentry versions 9.20.x antérieures à 9.20.2

References

Title

Publication Time

CERTFR-2024-AVI-1058

Vulnerability from certfr_avis - Published: - Updated:

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Impacted products

Vendor	Product	Description
Ivanti	Policy Secure (IPS)	Policy Secure (IPS) versions 22.7R1.x antérieures à 22.7R1.2
Ivanti	Sentry	Sentry versions 10.0.x antérieures à 10.0.2
Ivanti	Endpoint Manager (EPM)	Endpoint Manager versions 2022 SU6 et antérieures sans le dernier correctif publié par l'éditeur
Ivanti	Endpoint Manager (EPM)	Endpoint Manager versions 2024 et antérieures sans le dernier correctif publié par l'éditeur
Ivanti	Desktop and Server Management (DSM)	Desktop and Server Management (DSM) versions 2024.2 antérieures à 2024.3.5740
Ivanti	Sentry	Sentry versions 10.1.x antérieures à 10.1.0
Ivanti	Cloud Service Appliance (CSA)	Ivanti Cloud Services Application (CSA) versions 5.0.x antérieures à 5.0.3
Ivanti	Connect Secure (ICS)	Connect Secure (ICS) versions 22.7R2.x antérieures à 22.7R2.4
Ivanti	Sentry	Sentry versions 9.20.x antérieures à 9.20.2

References

Title

Publication Time

CNVD-2025-15729

Vulnerability from cnvd - Published: 2025-07-15

Title

Ivanti Patch SDK权限问题漏洞

Description

Ivanti Patch SDK是Ivanti公司提供的安全工具开发包，主要用于帮助企业自动化处理系统漏洞修复和补丁管理。 Ivanti Patch SDK存在权限问题漏洞，该漏洞源于权限不足。攻击者可利用该漏洞删除任意文件。

Severity

中

Patch Name

Ivanti Patch SDK权限问题漏洞的补丁

Patch Description

Ivanti Patch SDK是Ivanti公司提供的安全工具开发包，主要用于帮助企业自动化处理系统漏洞修复和补丁管理。 Ivanti Patch SDK存在权限问题漏洞，该漏洞源于权限不足。攻击者可利用该漏洞删除任意文件。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

目前厂商已发布升级程序修复该安全问题，详情见厂商官网： https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Patch-SDK-CVE-2024-10256?language=en_US

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-10256

Impacted products

Name
Ivanti Ivanti Patch SDK <9.7.703

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2024-10256",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2024-10256"
    }
  },
  "description": "Ivanti Patch SDK\u662fIvanti\u516c\u53f8\u63d0\u4f9b\u7684\u5b89\u5168\u5de5\u5177\u5f00\u53d1\u5305\uff0c\u4e3b\u8981\u7528\u4e8e\u5e2e\u52a9\u4f01\u4e1a\u81ea\u52a8\u5316\u5904\u7406\u7cfb\u7edf\u6f0f\u6d1e\u4fee\u590d\u548c\u8865\u4e01\u7ba1\u7406\u3002\n\nIvanti Patch SDK\u5b58\u5728\u6743\u9650\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u6743\u9650\u4e0d\u8db3\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5220\u9664\u4efb\u610f\u6587\u4ef6\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u7a0b\u5e8f\u4fee\u590d\u8be5\u5b89\u5168\u95ee\u9898\uff0c\u8be6\u60c5\u89c1\u5382\u5546\u5b98\u7f51\uff1a\r\nhttps://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Patch-SDK-CVE-2024-10256?language=en_US",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2025-15729",
  "openTime": "2025-07-15",
  "patchDescription": "Ivanti Patch SDK\u662fIvanti\u516c\u53f8\u63d0\u4f9b\u7684\u5b89\u5168\u5de5\u5177\u5f00\u53d1\u5305\uff0c\u4e3b\u8981\u7528\u4e8e\u5e2e\u52a9\u4f01\u4e1a\u81ea\u52a8\u5316\u5904\u7406\u7cfb\u7edf\u6f0f\u6d1e\u4fee\u590d\u548c\u8865\u4e01\u7ba1\u7406\u3002\r\n\r\nIvanti Patch SDK\u5b58\u5728\u6743\u9650\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u6743\u9650\u4e0d\u8db3\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u5220\u9664\u4efb\u610f\u6587\u4ef6\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Ivanti Patch SDK\u6743\u9650\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Ivanti Ivanti Patch SDK \u003c9.7.703"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2024-10256",
  "serverity": "\u4e2d",
  "submitTime": "2024-12-23",
  "title": "Ivanti Patch SDK\u6743\u9650\u95ee\u9898\u6f0f\u6d1e"
}

FKIE_CVE-2024-10256

Vulnerability from fkie_nvd - Published: 2024-12-10 19:15 - Updated: 2026-06-17 06:55

Severity

7.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Summary

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.

References

	URL	Tags
	3c1d8aa1-5a33-4ea4-8992-aadd6440af75	https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Patch-SDK-CVE-2024-10256	Mitigation, Vendor Advisory

Impacted products

Vendor	Product	Version
ivanti	endpoint_manager	2022
ivanti	endpoint_manager	2022
ivanti	endpoint_manager	2022
ivanti	endpoint_manager	2022
ivanti	endpoint_manager	2022
ivanti	endpoint_manager	2022
ivanti	endpoint_manager	2022
ivanti	endpoint_manager	2024
ivanti	neurons_agent_platform	*
ivanti	neurons_for_patch_management	*
ivanti	patch_for_configuration_manager	*
ivanti	patch_software_development_kit	*
ivanti	security_controls	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "affected",
          "product": "Patch SDK",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "9.7.703"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Endpoint Manager",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "2024 November Security Update",
              "versionType": "custom"
            },
            {
              "status": "unaffected",
              "version": "2022 SU6 November Security Update",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Security Controls",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "2024.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Patch for Configuration Manager",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "2024.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Neurons for Patch Management",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "2024.4",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Neurons Agent Platform",
          "vendor": "Ivanti",
          "versions": [
            {
              "status": "unaffected",
              "version": "2024.4",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:-:*:*:*:*:*:*",
              "matchCriteriaId": "46580865-5177-4E55-BDAC-73DA4B472B35",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su1:*:*:*:*:*:*",
              "matchCriteriaId": "E57E12B5-B789-450C-9476-6C4C151E6993",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su2:*:*:*:*:*:*",
              "matchCriteriaId": "E47C65B3-56DD-4D65-8B4B-6AFFE28E94F2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su3:*:*:*:*:*:*",
              "matchCriteriaId": "10D6EAB7-B14B-45E9-92B9-4FADFBBB08AF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su4:*:*:*:*:*:*",
              "matchCriteriaId": "1877FB55-76BA-4714-ABB8-47258132F537",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su5:*:*:*:*:*:*",
              "matchCriteriaId": "4F9E8D45-5F12-4D45-A74E-C314FA3618A3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su6:*:*:*:*:*:*",
              "matchCriteriaId": "5BB1FEE4-8B72-42A4-A7E1-DB3B10CE5CEE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:endpoint_manager:2024:-:*:*:*:*:*:*",
              "matchCriteriaId": "6C7283FE-C10A-4E37-B004-15FB0CAC49A5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:neurons_agent_platform:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9AB415B-32F3-498E-9B97-1A5DE832894C",
              "versionEndExcluding": "2024.4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:neurons_for_patch_management:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "196061EB-DBDD-47D3-879E-925635F7E91D",
              "versionEndExcluding": "2024.4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:patch_for_configuration_manager:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C6B7005-1A83-4269-AC99-1B340AA91D19",
              "versionEndExcluding": "2024.4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:patch_software_development_kit:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "76B31D23-C433-4E66-AA1B-DB0AB31C9CE0",
              "versionEndExcluding": "9.7.703",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ivanti:security_controls:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C441018-1D65-42AE-9500-71C7D9CD8C61",
              "versionEndExcluding": "2024.4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files."
    },
    {
      "lang": "es",
      "value": "Los permisos insuficientes en Ivanti Patch SDK anterior a la versi\u00f3n 9.7.703 permiten que un atacante autenticado local elimine archivos arbitrarios."
    }
  ],
  "id": "CVE-2024-10256",
  "lastModified": "2026-06-17T06:55:15.097",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.2,
        "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-10256",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-12-10T20:44:51.647383Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2024-12-10T19:15:19.280",
  "references": [
    {
      "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Patch-SDK-CVE-2024-10256"
    }
  ],
  "sourceIdentifier": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-732"
        }
      ],
      "source": "3c1d8aa1-5a33-4ea4-8992-aadd6440af75",
      "type": "Secondary"
    }
  ]
}

GHSA-3X49-H2MV-H459

Vulnerability from github – Published: 2024-12-10 21:30 – Updated: 2024-12-10 21:30

Details

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.

Severity

7.1 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2024-10256"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-732"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-12-10T19:15:19Z",
    "severity": "HIGH"
  },
  "details": "Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.",
  "id": "GHSA-3x49-h2mv-h459",
  "modified": "2024-12-10T21:30:52Z",
  "published": "2024-12-10T21:30:52Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10256"
    },
    {
      "type": "WEB",
      "url": "https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Patch-SDK-CVE-2024-10256"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

WID-SEC-W-2024-3671

Vulnerability from csaf_certbund - Published: 2024-12-10 23:00 - Updated: 2024-12-10 23:00

Summary

Ivanti Patch SDK: Schwachstelle ermöglicht Löschen von Dateien

Severity

Mittel

Scope

1 vulnerability in this advisory, including CVE-2024-10256.

CVE-2024-10256

Es besteht eine Schwachstelle im Ivanti Patch SDK aufgrund unkorrekter Berechtigungszuweisungen. Ein lokaler Angreifer kann diese Schwachstelle ausnutzen, um beliebige Dateien zu löschen.

Known affected: 2 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2024-10256 (GCVE-0-2024-10256)

CERTFR-2024-AVI-1058

Solutions

CERTFR-2024-AVI-1058

Solutions

CNVD-2025-15729

FKIE_CVE-2024-10256

GHSA-3X49-H2MV-H459

WID-SEC-W-2024-3671

Tags

Sightings

Nomenclature

Related by attack behaviour