CVE-2024-9167

Ivanti / Velocity License Server PUBLISHED

Description (CNA)

Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation.

Affected (CNA)

Vendor / product	Versions
Ivanti / Velocity License Server	unaffected 5.2

CWE

CWE-276

References

https://forums.ivanti.com/s/article/Security-Advisory-Velocity-License-Server-CVE-2024-9167

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.