CVE-2024-9167

Description

Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation.

Affected Platforms

Weakness Type

CWE-276

References

• https://forums.ivanti.com/s/article/Security-Advisory-Velocity-License-Server-CV…