CVE-2024-50324: 
Ivanti Endpoint Manager vulnerability analysis and mitigation

A path traversal vulnerability (CVE-2024-50324) was identified in Ivanti Endpoint Manager, affecting versions before the 2024 November Security Update or 2022 SU6 November Security Update. The vulnerability was discovered in August 2024 and publicly disclosed on November 13, 2024. This security flaw specifically exists within the implementation of the GetFilePath method (ZDI Advisory).

The vulnerability stems from improper validation of user-supplied paths prior to their use in file operations, classified as CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). The vulnerability has received a CVSS v3.1 base score of 7.2 (High), with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H, indicating network accessibility, low attack complexity, and high privileges required (NVD).

When successfully exploited, this vulnerability allows an authenticated attacker with admin privileges to execute arbitrary code in the context of the service account, potentially leading to remote code execution on affected installations of Ivanti Endpoint Manager (ZDI Advisory).

Ivanti has released security updates to address this vulnerability. Users are advised to apply either the 2024 November Security Update or the 2022 SU6 November Security Update, depending on their version (ZDI Advisory).