Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Secure_access_client
(Ivanti)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 13 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2023-10-25 | CVE-2023-38041 | A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a particular process flow is initiated, an attacker can exploit this condition to gain unauthorized elevated privileges on the affected system. | Secure_access_client | 7.0 | ||
| 2025-02-11 | CVE-2024-13813 | Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary files. | Secure_access_client | 7.1 | ||
| 2024-11-12 | CVE-2024-7571 | Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges. | Secure_access_client | 7.8 |