CVE-2023-38041 New client side release to address a privilege escalation on Windows user machines

Summary A vulnerability exists on all versions of the Ivanti Secure Access Client Below 22.6R1 that would allow an unprivileged local user to gain unauthorized elevated privileges on the affected system. Mitigation Currently None Resoluiton To resolve the below mentioned vulnerability upgrade you...

Ivanti Secure Access Client < 22.3R3 Local Privilege Escalation (CVE-2023-34298)

The Ivanti Secure Access Client installed on the remote Windows system is prior to 22.3R3. It is, therefore, affected by a local privilege escalation vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

CVE (2023-34298) Ivanti Secure Access Client Local Privilege Escalation

Summary A logged in Windows user can leverage functionality of the Pulse Secure / Ivanti Secure Access Client or Pulse Secure Installer Service to carry out a privilege escalation on the user machine. Mitigation None Currently Related Links https://forums.ivanti.com/s/article/New-Client-Side...