CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

CVE-2025-22454

creationtimestamp| type| source ---|---|--- 2025-03-11 14:39:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7155 2025-03-11 17:37:31+00:00| seen| https://t.me/cvedetector/20087 2025-03-12 13:31:29+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lk6owi4smk2y 2025-03-24...

CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

CVE-2025-22454

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...

CVE-2025-22454

CVE-2025-22454 concerns Ivanti Secure Access Client (ISAC). Affected: ISAC before 22.7R4 (Windows) with insufficiently restrictive permissions that allow a local, authenticated attacker to escalate privileges. Root cause: privilege limitation flaw enabling unauthorized elevation. Impact: local pr...

March Security Advisory Ivanti Secure Access Client (ISAC) (CVE-2025-22454)

Summary Ivanti has released updates for Ivanti Secure Access Client ISAC which addresses one high severity vulnerability. Successful exploitation could lead to privilege escalation. We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure. Vulnerability...