← Database

CVE-2024-8539

HIGH CVSS: 7.1 Published: 2024-11-12 Modified: 2026-06-17

Description

Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files.

Affected Platforms

Microsoft WindowsLinux Linux KernelIvanti Secure Access ClientApple Macos

Weakness Type

CWE-267, NVD-CWE-Other

References