Local arbitrary file write via insecure agent permissions

Incorrect default permissions in the Ivanti Endpoint Manager agent before 2024 SU4 allow local users to write arbitrary files. Ivanti has not published the affected agent file, directory, permission entry, or the operation that turns the permissive default into an arbitrary write. A low-privileged authenticated account on an endpoint is required, and successful exploitation can overwrite files across the local disk and disrupt endpoint operation.