CVE-2024-29821: Ivanti Desktop & Server Management

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.

Affected products

• Ivanti Desktop & Server Management: before 2024.2 (fixed in 2024.2)

Published 2024-10-18. Last modified 2026-06-17.