166 matches found
Ivanti Secure Access Client Security Vulnerability
Ivanti Secure Access Client is a security software client from Ivanti. A security vulnerability exists in Ivanti Secure Access Client prior to version 22.6R1, which originates from the ability to elevate its privileges via a competitive condition, and can be exploited by an attacker to gain...
CVE-2023-38041 New client side release to address a privilege escalation on Windows user machines
Summary A vulnerability exists on all versions of the Ivanti Secure Access Client Below 22.6R1 that would allow an unprivileged local user to gain unauthorized elevated privileges on the affected system. Mitigation Currently None Resoluiton To resolve the below mentioned vulnerability upgrade you...
Ivanti Secure Access Client < 22.3R3 Local Privilege Escalation (CVE-2023-34298)
The Ivanti Secure Access Client installed on the remote Windows system is prior to 22.3R3. It is, therefore, affected by a local privilege escalation vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
CVE (2023-34298) Ivanti Secure Access Client Local Privilege Escalation
Summary A logged in Windows user can leverage functionality of the Pulse Secure / Ivanti Secure Access Client or Pulse Secure Installer Service to carry out a privilege escalation on the user machine. Mitigation None Currently Related Links https://forums.ivanti.com/s/article/New-Client-Side...
PT-2023-7238 · Ivanti · Ivanti Secure Access Client
Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client ISAC versions affected versions not specified Description: The issue is related to the use of an insecure configuration in the Ivanti Secure Access Client ISAC for Windows, which could allow an attacker to gain...