Home

Description

Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files.

PUBLISHED Reserved 2024-08-06 | Published 2024-12-10 | Updated 2024-12-10 | Assigner ivanti




HIGH: 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Problem types

CWE-732 Incorrect Permission Assignment for Critical Resource

Product status

Default status
affected

2024.3.5740 (custom)
unaffected

References

forums.ivanti.com/...and-Server-Management-DSM-CVE-2024-7572

cve.org (CVE-2024-7572)

nvd.nist.gov (CVE-2024-7572)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.