Improper Authorization in Ivanti Secure Access Client Leading to Configuration File Alterations

CVE-2024-8539

Summary

A vulnerability has been identified in the Ivanti Secure Access Client that affects versions prior to 22.7R3. This flaw allows a local authenticated attacker to gain unauthorized access to modify sensitive configuration files, potentially leading to unauthorized data manipulation and access control issues. Organizations using affected versions should take immediate action to upgrade to the latest version to mitigate this security risk.

References