CVE Vulnerabilities

CVE-2024-13164

Use of Uninitialized Resource

Published: Jan 14, 2025 | Modified: Jul 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An uninitialized resource in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a local authenticated attacker to escalate their privileges.

Weakness

The product uses or accesses a resource that has not been initialized.

Affected Software

Name Vendor Start Version End Version
Endpoint_manager Ivanti * 2022 (excluding)
Endpoint_manager Ivanti 2022 (including) 2022 (including)
Endpoint_manager Ivanti 2022-su1 (including) 2022-su1 (including)
Endpoint_manager Ivanti 2022-su2 (including) 2022-su2 (including)
Endpoint_manager Ivanti 2022-su3 (including) 2022-su3 (including)
Endpoint_manager Ivanti 2022-su4 (including) 2022-su4 (including)
Endpoint_manager Ivanti 2022-su5 (including) 2022-su5 (including)
Endpoint_manager Ivanti 2024 (including) 2024 (including)

Potential Mitigations

References