Vulnerability Description
A buffer overflow allows a low privilege user on the local machine that has the EPM Agent installed to execute arbitrary code with elevated permissions in Ivanti EPM 2021.1 and older.
CVSS Score
7.8
HIGH
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | Endpoint Manager | <= 2021.1 |
Related Weaknesses (CWE)
References
- https://forums.ivanti.com/s/article/CVE-2024-22058-Privilege-Escalation-for-IvanPermissions Required
- https://forums.ivanti.com/s/article/CVE-2024-22058-Privilege-Escalation-for-IvanPermissions Required
FAQ
What is CVE-2024-22058?
CVE-2024-22058 is a vulnerability with a CVSS score of 7.8 (HIGH). A buffer overflow allows a low privilege user on the local machine that has the EPM Agent installed to execute arbitrary code with elevated permissions in Ivanti EPM 2021.1 and older.
How severe is CVE-2024-22058?
CVE-2024-22058 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-22058?
Check the references section above for vendor advisories and patch information. Affected products include: Ivanti Endpoint Manager.