VYPR
← All advisories
High severity7.8NVD Advisory· Published Jan 14, 2025· Updated Jun 17, 2026

CVE-2024-10630

CVE-2024-10630

Description

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality.

Affected products

11
  • Ivanti/Application Control10 versions
    cpe:2.3:a:ivanti:application_control:*:*:*:*:*:*:*:*+ 9 more
    • cpe:2.3:a:ivanti:application_control:*:*:*:*:*:*:*:*range: <2023.3
    • cpe:2.3:a:ivanti:application_control:*:-:*:*:*:*:*:*range: <2023.3
    • cpe:2.3:a:ivanti:application_control:2023.3:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:application_control:2023.3:hf1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:application_control:2023.3:hf2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:application_control:2024.1:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:application_control:2024.1:hf1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:application_control:2024.3:-:*:*:*:*:*:*
    • (no CPE)range: <10.14.4.0
    • (no CPE)range: 10.14.4.0
  • Ivanti/Security Controls
    cpe:2.3:a:ivanti:security_controls:*:*:*:*:*:*:*:*
    Range: <=2024.4.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.