Exploit for Incorrect Default Permissions in Ivanti Secure_Access_Client

🗓️ 10 Feb 2024 16:12:52Reported by HopHouseType

Exploit for Ivanti/Pulse VPN Client Privilege Escalatio

Reporter	Title	Published	Views	Family All 15
BDU FSTEC	The vulnerability of the VPN server of the Ivanti Secure Access Client (ISAC) for corporate networks (formerly known as Pulse Secure Desktop Client) on Windows operating systems arises from the use of insecure configurations. This vulnerability allows attackers to gain unauthorized access to protected information, increase their privileges, or cause service interruptions.	1 Dec 202300:00	–	bdu_fstec
Circl	CVE-2023-35080	12 Feb 202400:32	–	circl
CNNVD	Ivanti Secure Access Client Security Vulnerability	14 Nov 202300:00	–	cnnvd
CVE	CVE-2023-35080	14 Nov 202323:18	–	cve
Cvelist	CVE-2023-35080	14 Nov 202323:18	–	cvelist
EUVD	EUVD-2023-39115	3 Oct 202520:07	–	euvd
Ivanti	Security fixes included in the latest Ivanti Secure Access Client Release	9 Nov 202323:59	–	ivanti
Tenable Nessus	Ivanti Secure Access Client < 22.6R1.1 Multiple Vulnerabilities	20 Dec 202300:00	–	nessus
NCSC	Vulnerabilities fixed in Ivanti Secure Access Client	13 Nov 202300:00	–	ncsc
NVD	CVE-2023-35080	15 Nov 202300:15	–	nvd