CVE-2024-7612

HIGH

Ivanti Endpoint Manager Mobile - Incorrect Permission Assignment

Title source: rule

Insecure permissions in Ivanti EPMM before 12.1.0.4 allow a local authenticated attacker to modify sensitive application components.

CVSS v3 8.8

EPSS 0.0018

EPSS Percentile 39.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

CWE

CWE-732

Status published

Products (1)

ivanti/endpoint_manager_mobile < 12.0.0.5

Published Oct 08, 2024

Tracked Since Feb 18, 2026