Vulnerability in Ivanti Secure Access Client Could Lead to Denial of Service and System Compromise

CVE-2023-38043

Summary

A vulnerability exists in the Ivanti Secure Access Client that affects all versions below 22.6R1.1, allowing a locally authenticated attacker to exploit misconfigurations. This exploitation could result in a denial of service (DoS) condition on the affected machine, and in certain scenarios, it can facilitate a complete system compromise. Users of the Ivanti Secure Access Client are advised to upgrade to the latest version to mitigate potential risks and secure their systems.

References