Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders.
2024-11-12T17:15:11.580
2025-01-17T19:55:48.957
Analyzed
3c1d8aa1-5a33-4ea4-8992-aadd6440af75
CVSSv3.1: 7.3 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | ivanti | secure_access_client | < 22.7 | Yes |
| Application | ivanti | secure_access_client | 22.7 | Yes |
| Application | ivanti | secure_access_client | 22.7 | Yes |
| Application | ivanti | secure_access_client | 22.7 | Yes |
| Application | ivanti | secure_access_client | 22.7 | Yes |
| Application | ivanti | secure_access_client | 22.7 | Yes |
| Operating System | microsoft | windows | - | No |