Local Authentication Flaw in Ivanti Secure Access Windows Client

CVE-2023-35080

Summary

A security vulnerability has been discovered in the Ivanti Secure Access Windows Client, where a locally authenticated attacker could exploit a vulnerable configuration. This flaw poses significant risks, including the potential for privilege escalation, denial of service, and unauthorized information disclosure. Organizations utilizing the Ivanti Secure Access Windows Client should remain vigilant and ensure they are using the updated versions to mitigate these security issues.

References