Under specific circumstances, insecure permissions in Ivanti Velocity License Server before version 5.2 allows a local authenticated attacker to achieve local privilege escalation.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://forums.ivanti.com/s/article/Security-Advisory-Velocity-License-Server-CVE-2024-9167 | Vendor Advisory |
Configurations
History
13 Aug 2025, 00:22
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://forums.ivanti.com/s/article/Security-Advisory-Velocity-License-Server-CVE-2024-9167 - Vendor Advisory | |
| CPE | cpe:2.3:a:ivanti:velocity_license_server:*:*:*:*:*:*:*:* | |
| First Time |
Ivanti velocity License Server
Ivanti |
08 Oct 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-08 17:15
Updated : 2025-08-13 00:22
NVD link : CVE-2024-9167
Mitre link : CVE-2024-9167
JSON object : View
Products Affected
ivanti
- velocity_license_server
CWE
No CWE.