Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privilege escalation.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
缺省权限不正确
Vulnerability Title
Ivanti Automation 安全漏洞
Vulnerability Description
Ivanti Automation是美国Ivanti公司的一款应用程序。通过自动化基础设施、云和工作空间自动化，简化了复杂混合环境的管理。 Ivanti Automation 2024.4.0.1之前版本存在安全漏洞，该漏洞源于权限管理不当。攻击者利用该漏洞可以提升权限。
CVSS Information
N/A
Vulnerability Type
N/A