184 matches found
Ivanti Secure Access Client < 22.3R3 Local Privilege Escalation (CVE-2023-34298)
The Ivanti Secure Access Client installed on the remote Windows system is prior to 22.3R3. It is, therefore, affected by a local privilege escalation vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
CVE (2023-34298) Ivanti Secure Access Client Local Privilege Escalation
Summary A logged in Windows user can leverage functionality of the Pulse Secure / Ivanti Secure Access Client or Pulse Secure Installer Service to carry out a privilege escalation on the user machine. Mitigation None Currently Related Links https://forums.ivanti.com/s/article/New-Client-Side...
PT-2023-7238 · Ivanti · Ivanti Secure Access Client
Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client ISAC versions affected versions not specified Description: The issue is related to the use of an insecure configuration in the Ivanti Secure Access Client ISAC for Windows, which could allow an attacker to gain...