BaseFortify

Publication date: 2025-11-11

Last updated on: 2025-11-17

Assigner: ivanti

Description

Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on disk

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-11

Last Modified

2025-11-17

Generated

2026-07-06

AI Q&A

2025-11-11

EPSS Evaluated

2026-07-05

NVD

CVE-2025-10918

Affected Vendors & Products

Vendor	Product	Version / Range
ivanti	endpoint_manager	to 2024 (exc)
ivanti	endpoint_manager	2024
ivanti	endpoint_manager	2024
ivanti	endpoint_manager	2024
ivanti	endpoint_manager	2024
ivanti	endpoint_manager	2024

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

Executive Summary

This vulnerability is due to insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4. It allows a local authenticated attacker to write arbitrary files anywhere on the disk.

Impact Analysis

An attacker with local authenticated access can exploit this vulnerability to write arbitrary files anywhere on the disk, potentially leading to unauthorized modification of files, disruption of system integrity, or further escalation of privileges.

Hi! I’m here to help you understand CVE-2025-10918. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70