The vulnerability of the Ivanti Secure Access Client (formerly Pulse Secure Desktop Client)’s VPN server for corporate networks on Linux operating systems arises from an operation that goes beyond the buffer in memory. This allows a malicious user to execute arbitrary code with SYSTEM privileges.

The vulnerability of the Ivanti Secure Access Client formerly Pulse Secure Desktop Client for corporate networks’ VPN servers on Linux operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a attacker to execute...