Executive Risk Summary
"A local authenticated attacker can modify sensitive application components in Ivanti EPMM before 12.1.0.4 due to insecure permissions, potentially leading to data integrity and security issues. This vulnerability allows an attacker to exploit the system, compromising its security and potentially affecting the confidentiality, integrity, and availability of the data."
Operational Audit Arsenal
Target Type Application Component
Target Asset Ivanti EPMM Application
Standard Path /opt/ivanti/epmm
Manual Verification Required
This is a non-Windows asset (Ivanti). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.
Patch Impact Forecast
Reboot Required Likely
Moderate
Internal Work Notes
CVE-2024-7612: Ivanti EPMM insecure permissions vulnerability, requires upgrade to version 12.1.0.4 or later to mitigate potential data integrity and security risks.
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Related Ivanti Threats
Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.