CVE-2024-50329

published 2024-11-12

CVE-2024-50329: Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to…

Priority P3 57 high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker to achieve remote code execution. User interaction is required.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ivanti	endpoint_manager	< 2022	2022
ivanti	endpoint_manager	—	—
ivanti	endpoint_manager	—	—

Detection & IOCs extracted from sources · hover to see the quote

• → Vulnerability class is path traversal (CWE-22) in Ivanti Endpoint Manager allowing unauthenticated RCE; monitor for path traversal sequences (e.g., '../') in HTTP requests targeting Ivanti EPM endpoints ↗
• → Attack requires user interaction; consider monitoring for social-engineering vectors or phishing lures targeting Ivanti EPM users in conjunction with exploitation attempts ↗

• · Vulnerable versions are Ivanti Endpoint Manager prior to the 2024 November Security Update or 2022 SU6 November Security Update; patch to these versions to remediate ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22