VYPR
High severity7.1NVD Advisory· Published Dec 10, 2024· Updated Jun 17, 2026

CVE-2024-10256

CVE-2024-10256

Description

Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.

Affected products

20
  • cpe:2.3:a:ivanti:endpoint_manager:2022:-:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:ivanti:endpoint_manager:2022:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:endpoint_manager:2022:su1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:endpoint_manager:2022:su2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:endpoint_manager:2022:su3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:endpoint_manager:2022:su4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:endpoint_manager:2022:su5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:endpoint_manager:2022:su6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:endpoint_manager:2024:-:*:*:*:*:*:*
  • cpe:2.3:a:ivanti:neurons_agent_platform:*:*:*:*:*:*:*:*
    Range: <2024.4
  • cpe:2.3:a:ivanti:neurons_for_patch_management:*:*:*:*:*:*:*:*
    Range: <2024.4
  • cpe:2.3:a:ivanti:patch_for_configuration_manager:*:*:*:*:*:*:*:*
    Range: <2024.4
  • cpe:2.3:a:ivanti:patch_software_development_kit:*:*:*:*:*:*:*:*
    Range: <9.7.703
  • cpe:2.3:a:ivanti:security_controls:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ivanti:security_controls:*:*:*:*:*:*:*:*range: <2024.4
    • (no CPE)range: 2024.4
  • Ivanti/Patch SDKllm-fuzzy2 versions
    <9.7.703+ 1 more
    • (no CPE)range: <9.7.703
    • (no CPE)range: 9.7.703
  • Range: 2024 November Security Update
  • Ivanti/Neurons Agent Platformv5
    Range: 2024.4
  • Ivanti/Neurons for Patch Managementv5
    Range: 2024.4
  • Ivanti/Patch for Configuration Managerv5
    Range: 2024.4

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.