CVE-2023-38543

The CVE-2023-38543 entry affects Ivanti Secure Access Client versions prior to 22.6R1.1. The vulnerability is triggered by a vulnerable configuration on systems with local authentication, potentially causing a DoS on the user machine. Public sources confirm the affected version range and suggest ...

CVE-2023-38043

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to a denial of service DoS condition on the user machine and, in some cases, resulting in a full...

CVE-2023-35080

A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to various security risks, including the escalation of privileges, denial of service, or information...

CVE-2023-35080

CVE-2023-35080 affects Ivanti Secure Access Client for Windows. The public material in connected documents confirms a vulnerable configuration enabling a locally authenticated attacker to achieve elevation of privileges, denial of service, or information disclosure. A GitHub exploit linked to thi...

Ivanti Secure Access Client Security Vulnerability

Ivanti Secure Access Client is a security software client from Ivanti. A security vulnerability exists in Ivanti Secure Access Client versions prior to 22.6R1.1, which stems from a vulnerability that allows locally authenticated attackers to exploit vulnerable configurations, resulting in a denia...

PT-2023-26504 · Ivanti · Ivanti Secure Access Client

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client versions prior to 22.6R1.1 Description: A locally authenticated attacker could exploit a vulnerable configuration, potentially leading to a denial of service DoS condition on the user machine. Recommendations: For...

Ivanti Secure Access Client Security Vulnerability

Ivanti Secure Access Client is a security software client from Ivanti. A security vulnerability exists in Ivanti Secure Access Client versions prior to 22.6R1.1, which stems from a vulnerability that allows an unprivileged local user to gain unauthorized elevated privileges on an affected system...

Ivanti Secure Access Client Security Vulnerability

Ivanti Secure Access Client is a security software client from Ivanti. A security vulnerability exists in Ivanti Secure Access Client versions prior to 22.5R1 that originated from allowing logged in users to modify specific files, which could result in unauthorized changes to system-wide...

PT-2023-26263 · Ivanti · Ivanti Secure Access Client

Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client versions prior to 22.6R1.1 Description: A vulnerability exists in the Ivanti Secure Access Client, which could allow a locally authenticated attacker to exploit a vulnerable configuration. This could potentially le...

Ivanti Secure Access Client Security Vulnerability

Ivanti Secure Access Client is a security software client from Ivanti. A security vulnerability exists in Ivanti Secure Access Client versions prior to 22.6R1.1, which stems from a vulnerability that allows locally authenticated attackers to exploit vulnerable configurations, resulting in...

Vulnerabilities fixed in Ivanti Secure Access Client

Ivanti has fixed vulnerabilities in Secure Access Client formerly Pulse Secure Desktop Client. A local malicious person could exploit the vulnerabilities to grant himself elevated privileges granted and thus execute code with potentially system privileges and/or gain access to sensitive data...

Security fixes included in the latest Ivanti Secure Access Client Release

Last Modified Date Nov 16, 2023 2:01:28 PM...

Ivanti Secure Access Client Security Vulnerability

Ivanti Secure Access Client is a security software client from Ivanti. A security vulnerability exists in Ivanti Secure Access Client prior to version 22.6R1, which originates from the ability to elevate its privileges via a competitive condition, and can be exploited by an attacker to gain...

CVE-2023-38041 New client side release to address a privilege escalation on Windows user machines

Summary A vulnerability exists on all versions of the Ivanti Secure Access Client Below 22.6R1 that would allow an unprivileged local user to gain unauthorized elevated privileges on the affected system. Mitigation Currently None Resoluiton To resolve the below mentioned vulnerability upgrade you...

Update Citrix Secure Access and SSO apps to 23.09.1 before upgrading OS on Mac and iOS devices

In general we have seen two issues with the beta releases from Apple for Sonoma and iOS 17. So if the versions prior to 23.09.1 of the Citrix Secure Access and SSO apps are used with MacOS Sonoma and iOS/iPadOS 17, then the following issues would be seen: Apps will not be able to generate the log...

Siemens RUGGEDCOM CROSSBOW SQL Injection Vulnerability (CNVD-2023-62042)

RUGGEDCOM CROSSBOW is a secure access management solution designed to provide NERC CIP compliant access to smart electronic devices. Siemens RUGGEDCOM CROSSBOW suffers from a SQL injection vulnerability that can be exploited by an attacker to execute arbitrary SQL queries on the server database...

Siemens RUGGEDCOM CROSSBOW SQL Injection Vulnerability (CNVD-2023-62043)

RUGGEDCOM CROSSBOW is a secure access management solution designed to provide NERC CIP compliant access to smart electronic devices. Siemens RUGGEDCOM CROSSBOW suffers from a SQL injection vulnerability that can be exploited by an attacker to execute arbitrary SQL queries on the server database a...

Siemens RUGGEDCOM CROSSBOW 访问控制错误漏洞

RUGGEDCOM CROSSBOW is a secure access management solution designed to provide NERC CIP compliant access to smart electronic devices. An authentication vulnerability in Siemens RUGGEDCOM CROSSBOW that lacks critical functionality can be exploited by an attacker to write arbitrary files to the file...

The vulnerability of the access control system for the virtual environment, previously known as Citrix Secure Access (formerly Citrix Gateway), is related to insecure management of privileges. This issue needs to be addressed to enhance the security of privileges.

The vulnerability of the access control system for the virtual environment, previously known as Citrix Secure Access formerly Citrix Gateway, is related to insecure management of privileges. Exploiting this vulnerability could allow attackers to enhance their privileges...

Citrix Secure Access < 23.5.1.3 Privilege Escalation (CTX561480)

A privilege escalation vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint with Standard User Account that has the vulnerable client installed to escalate their local privileges to that of NT...