CVE-2024-8540

Ivanti / Sentry PUBLISHED

Description (CNA)

Insecure permissions in Ivanti Sentry before versions 9.20.2 and 10.0.2 or 10.1.0 allow a local authenticated attacker to modify sensitive application components.

Affected (CNA)

Vendor / product	Versions
Ivanti / Sentry	unaffected 9.20.2; unaffected 10.0.2; unaffected 10.1.0

CWE

CWE-732

References

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Sentry-CVE-2024-8540

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.