167 matches found
The vulnerability of the VPN server for corporate networks of Ivanti Secure Access Client (ISAC), previously known as Pulse Secure Desktop Client, on Windows operating systems arises from incorrect verification of the cryptographic signature. This vulnerability allows attackers to escalate their privileges.
The vulnerability of the Ivanti Secure Access Client ISAC, previously known as Pulse Secure Desktop Client, for corporate networks running on Windows operating systems is related to an improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to...
The vulnerability of the VPN server in corporate networks of Ivanti Secure Access Client (formerly Pulse Secure Desktop Client) – related to copying buffers without checking the size of the input data – allows a hacker to trigger a service failure.
The vulnerability of the VPN server in corporate networks of Ivanti Secure Access Client formerly Pulse Secure Desktop Client relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Ivanti Secure Access Client Denial of Service Vulnerability
Ivanti Secure Access Client is a security software client from Ivanti that is primarily used to enable remote secure access. A denial of service vulnerability exists in Ivanti Secure Access Client that originates from improper boundary checking and can be exploited by an attacker to cause a denia...
Ivanti Secure Access Client Competitive Conditions Vulnerability
Ivanti Secure Access Client is a security software client developed by Ivanti, Inc. that is primarily used to enable remote secure access with support for enterprise-class VPN connections and encrypted access to resources. Ivanti Secure Access Client suffers from a competitive condition...
Ivanti Secure Access Client Buffer Over-Read Vulnerability
Ivanti Secure Access Client is a security software client developed by Ivanti, Inc. to enable remote secure access, supporting enterprise-class VPN connections and encrypted access to resources. Ivanti Secure Access Client suffers from a buffer over-read vulnerability that can be exploited by...
CVE-2024-37398
Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...
CVE-2024-38654
Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service...
CVE-2024-38654
Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service...
CVE-2024-37398
Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...
CVE-2024-29211
A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify sensitive configuration files...
CVE-2024-29211
A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify sensitive configuration files...
CVE-2024-29211
CVE-2024-29211 is a race condition in Ivanti Secure Access Client prior to 22.7R4. A local authenticated attacker can modify sensitive configuration files due to synchronization issues when accessing shared resources. Affected product: Ivanti Secure Access Client (Windows/Linux/macOS). Impact sta...
CVE-2024-38654
CVE-2024-38654 affects Ivanti Secure Access Client prior to version 22.7R3. The issue is due to improper bounds checking (a buffer copy without size validation), which can be exploited by a local authenticated attacker with admin privileges to cause a denial of service. The coordinated remediatio...
CVE-2024-38654
Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service...
CVE-2024-37398
CVE-2024-37398 relates to Ivanti Secure Access Client. The issue is caused by insufficient input validation in the client before version 22.7R4, enabling a local authenticated attacker to escalate privileges (local, initial access via the client). The CVE is also observed in related Ivanti produc...
CVE-2024-29211
A race condition in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to modify sensitive configuration files...
CVE-2024-37398
Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges...
CVE-2024-38654
Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service...