PT-2024-39880 · Ivanti · Ivanti Secure Access Client
CVE-2024-9842
·
Published
2024-11-12
·
Updated
2025-01-17
CVSS v3.1
7.3
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H |
Name of the Vulnerable Software and Affected Versions
Ivanti Secure Access Client versions prior to 22.7R4
Description
The issue allows a local authenticated attacker to create arbitrary folders due to incorrect permissions.
Recommendations
For versions prior to 22.7R4, update to version 22.7R4 or later to resolve the issue.
Fix
Incorrect Permission
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ivanti Secure Access Client