CVE-2024-10630

Published: Jan 14, 2025Modified: Jun 17, 2026

7.0

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.0 / Impact: 5.9

Source: NVD

Description

A race condition in Ivanti Application Control Engine before version 10.14.4.0 allows a local authenticated attacker to bypass the application blocking functionality.

Affected (9)

Products: Ivanti: Application Control, Security Controls

Ivanti

2 products

Application Control

Security Controls

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ivanti Application Control	Before 2023.3
Ivanti Application Control	Before 2023.3
Ivanti Application Control	Version 2023.3
Ivanti Application Control	Version 2023.3 hf1
Ivanti Application Control	Version 2023.3 hf2
Ivanti Application Control	Version 2024.1
Ivanti Application Control	Version 2024.1 hf1
Ivanti Application Control	Version 2024.3
Ivanti Security Controls	Up to 2024.4.1

Related CWEs

CWE-366

Race Condition within a Thread

If two threads of execution use a resource simultaneously, there exists the possibility that resources may be used while invalid, in turn making the state of execution undefined.

References (1)

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Application-Control-Engine-CVE-2024-10630

Source: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

MitigationVendor Advisory

Timeline

No history available yet.