← Database

CVE-2024-8441

MEDIUM CVSS: 6.7 Published: 2024-09-10 Modified: 2026-06-17

Description

An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local authenticated attacker with admin privileges to escalate their privileges to SYSTEM.

Affected Platforms

Ivanti Endpoint Manager

Weakness Type

CWE-427, CWE-427

References