CVE-2023-38043

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service DoS condition on the user machine and, in some cases, resulting in a full...

CVE-2023-38543

The CVE-2023-38543 entry affects Ivanti Secure Access Client versions prior to 22.6R1.1. The vulnerability is triggered by a vulnerable configuration on systems with local authentication, potentially causing a DoS on the user machine. Public sources confirm the affected version range and suggest ...

PT-2023-26263 · Ivanti · Ivanti Secure Access Client

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client versions prior to 22.6R1.1 Description: A vulnerability exists in the Ivanti Secure Access Client, which could allow a locally authenticated attacker to exploit a vulnerable configuration. This could potentially le...

Vulnerabilities fixed in Ivanti Secure Access Client

Ivanti has fixed vulnerabilities in Secure Access Client formerly Pulse Secure Desktop Client. A local malicious person could exploit the vulnerabilities to grant himself elevated privileges granted and thus execute code with potentially system privileges and/or gain access to sensitive data...

Security fixes included in the latest Ivanti Secure Access Client Release

Last Modified Date Nov 16, 2023 2:01:28 PM...

CVE-2023-38041 New client side release to address a privilege escalation on Windows user machines

Summary A vulnerability exists on all versions of the Ivanti Secure Access Client Below 22.6R1 that would allow an unprivileged local user to gain unauthorized elevated privileges on the affected system. Mitigation Currently None Resoluiton To resolve the below mentioned vulnerability upgrade you...

Design/Logic Flaw

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT AUTHORITY\SYSTEM...

Error "Couldn't connect to server 'https://gwfqdn:non-443' when log on to non-443 port vpn vserver

You may get the following error message"Couldn't connect to server 'https://gwfqdn:non-443'; while attempting to log on to non-443 port NetScaler Gateway virtual server using the latest Windows Secure Access Client. :...

Ivanti Secure Access Client < 22.3R3 Local Privilege Escalation (CVE-2023-34298)

The Ivanti Secure Access Client installed on the remote Windows system is prior to 22.3R3. It is, therefore, affected by a local privilege escalation vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

CVE (2023-34298) Ivanti Secure Access Client Local Privilege Escalation

Summary A logged in Windows user can leverage functionality of the Pulse Secure / Ivanti Secure Access Client or Pulse Secure Installer Service to carry out a privilege escalation on the user machine. Mitigation None Currently Related Links https://forums.ivanti.com/s/article/New-Client-Side...

Citrix 22.2.1.103 / 23.1.1.11 Local Privilege Escalation Exploit

//Discovered by:: TOUHAMI KASBAOUI - VXREMALWARE //Reported to Citrix: 25/03/2023 //Tested Version: 22.2.1.103, 23.1.1.11/Last version //Exploit: https://github.com/sqrtZeroKnowledge/CitrixSecureAccessLPE0DAY define UNICODE define UNICODE include include include include include using namespace st...