← All advisories

High severity7.1NVD Advisory· Published Dec 10, 2024· Updated Jun 17, 2026

CVE-2024-7572

CVE-2024-7572

Description

Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files.

Affected products

3

Ivanti/Desktop \& Server Management
cpe:2.3:a:ivanti:desktop_\&_server_management:*:*:*:*:*:*:*:*
Range: >=2024.2,<2024.3.5740
Ivanti/Desktop and Server Managementllm-create2 versions
<2024.3.5740+ 1 more
- (no CPE)range: <2024.3.5740
- (no CPE)range: 2024.3.5740

Patches

Vulnerability mechanics

References

1

forums.ivanti.com/s/article/Security-Advisory-Ivanti-Desktop-and-Server-Management-DSM-CVE-2024-7572nvdVendor Advisory

News mentions

0

No linked articles in our index yet.