CVE-2024-9842CWE-267CWE-732

Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders

High · published November 12, 2024

CVSS v3.1
7.3
EPSS
0%
Percentile
10.9
In the wild
Unconfirmed
What it is

Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00212 · 10.9th percentile
Weaknesses
CWE-267 · Privilege Defined With Unsafe Actions; CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2024-11-12T16:12Z
EPSS history
Timeline
  • 12 NOV 16:12Z
    Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders
    cvelistv5