CVE-2024-34787 Path traversal in EPM

High 7.8 Published 13 Nov 2024 Updated 19 Nov 2024

A local unauthenticated attacker can achieve code execution via path traversal in Ivanti Endpoint Manager, requiring user interaction.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2024-34787?

CVE-2024-34787 is a high-severity path traversal vulnerability in Ivanti Endpoint Manager, published on 13 Nov 2024. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required.

Weakness: CWE-22

Which versions are affected by CVE-2024-34787?

It affects 1 product.

Products include Ivanti Endpoint Manager.

How do I fix CVE-2024-34787?

No fix has been published for CVE-2024-34787 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2024-34787 being exploited?

There is no known exploitation of CVE-2024-34787 in the wild and no public exploit code.

All Ivanti Endpoint Manager vulnerabilities

Sources

Also known as GHSA-8m6r-7r42-49x3.