PatchTheCVECVE-2024-10256: Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to d
28
Routine
HIGH 7.1DOWNGRADEUPGRADEUPGRADE
CVE-2024-10256 is a high-severity flaw (CVSS 7.1) affecting endpoint manager, neurons agent platform, neurons for patch management. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.
Why this priority
- High severity
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.1 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.2% (top 89%) |
| CISA exploited list | No |
| Weakness | CWE-732 |
| Published | 2024-12-10 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
ivanti endpoint manager DOWNGRADE
Affected: 2022 · 2022 su1 · 2022 su2 · 2022 su3 · 2022 su4 · 2022 su5 · 2022 su6 · 2024
Fixed in: no fixed release known
Safe to downgrade to: a release before 2022
1. Check installed version
apt-cache policy endpoint-manager || rpm -q endpoint-manager || endpoint-manager --version
2. No fixed release: DOWNGRADE to a release before 2022 (Debian / Ubuntu)
apt-cache madison endpoint-manager
sudo apt install endpoint-manager=<VERSION_BEFORE_2022>
sudo apt-mark hold endpoint-manager
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list endpoint-manager
sudo dnf downgrade endpoint-manager-<VERSION_BEFORE_2022>
sudo dnf versionlock add endpoint-manager
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
ivanti neurons agent platform UPGRADE
Affected: < 2024.4
Fixed in: 2024.4
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy neurons-agent-platform || rpm -q neurons-agent-platform || neurons-agent-platform --version
2. UPGRADE to 2024.4 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade neurons-agent-platform
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade neurons-agent-platform
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
ivanti neurons for patch management UPGRADE
Affected: < 2024.4
Fixed in: 2024.4
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy neurons-for-patch-management || rpm -q neurons-for-patch-management || neurons-for-patch-management --version
2. UPGRADE to 2024.4 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade neurons-for-patch-management
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade neurons-for-patch-management
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
ivanti patch for configuration manager UPGRADE
Affected: < 2024.4
Fixed in: 2024.4
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy patch-for-configuration-manager || rpm -q patch-for-configuration-manager || patch-for-configuration-manager --version
2. UPGRADE to 2024.4 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade patch-for-configuration-manager
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade patch-for-configuration-manager
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
ivanti patch software development kit UPGRADE
Affected: < 9.7.703
Fixed in: 9.7.703
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy patch-software-development-kit || rpm -q patch-software-development-kit || patch-software-development-kit --version
2. UPGRADE to 9.7.703 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade patch-software-development-kit
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade patch-software-development-kit
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
ivanti security controls UPGRADE
Affected: < 2024.4
Fixed in: 2024.4
Safe to downgrade to: no unaffected older release
1. Check installed version
apt-cache policy security-controls || rpm -q security-controls || security-controls --version
2. UPGRADE to 2024.4 (Debian / Ubuntu)
sudo apt update && sudo apt install --only-upgrade security-controls
2. UPGRADE (RHEL / Amazon Linux / Fedora)
sudo dnf upgrade security-controls
Note
Distros often backport fixes without changing the version number. Confirm with the distro advisory or changelog.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-10256?
endpoint manager: downgrade or apply the listed mitigation; neurons agent platform: upgrade to 2024.4; neurons for patch management: upgrade to 2024.4. Exact commands for each OS are on this page.
Is CVE-2024-10256 being exploited?
CVE-2024-10256 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-10256 affect?
CVE-2024-10256 affects endpoint manager, neurons agent platform, neurons for patch management. Severity is high (CVSS 7.1). Insufficient permissions in Ivanti Patch SDK before version 9.7.703 allows a local authenticated attacker to delete arbitrary files.
How urgent is CVE-2024-10256?
Priority 28/100. High severity
Software pages
Related CVEs
- CVE-2026-8111 HIGH 8.8 UPGRADE SQL injection in the web console of Ivanti Endpoint Manager before version 2024 SU6 allows a remote authentica
- CVE-2026-8109 MEDIUM 6.5 UPGRADE An exposed dangerous method on the Core Server of Ivanti Endpoint Manager before version 2024 SU6 allows a rem
- CVE-2026-8110 HIGH 7.8 UPGRADE Incorrect permissions assignment in the agent of Ivanti Endpoint Manager before version 2024 SU6 allows a loca
- CVE-2025-9713 HIGH 8.8 UPGRADE Path traversal in Ivanti Endpoint Manager before version 2024 SU4 allows a remote unauthenticated attacker to
- CVE-2025-62387 MEDIUM 6.5 UPGRADE SQL injection in Ivanti Endpoint Manager before version 2024 SU5 allows a remote authenticated attacker to rea