Ivanti Endpoint Manager Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in the agent of Ivanti Endpoint Manager, affecting versions through 2024 SU5. This vulnerability allows a local authenticated attacker to escalate privileges due to incorrect permissions assignment.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing an attacker to gain elevated rights or access within the system.

Remediation

Users can update to Ivanti Endpoint Manager 2024 SU6 to address this vulnerability. The update is available through the Ivanti License System (ILS).