Skip to main content

Secure Access Client CVE-2024-7571

HIGH
Privilege Defined With Unsafe Actions (CWE-267)
2024-11-12 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 12, 2024 - 17:15 nvd
HIGH 7.8

DescriptionNVD

Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.

AnalysisAI

Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-267. Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges. Affected products include: Ivanti Secure Access Client. Version information: before 22.7.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2024-3661 HIGH POC
7.6 May 06

DHCP can add routes to a client’s routing table via the classless static route option (121). Rated high severity (CVSS 7

CVE-2026-8992 HIGH
8.8 May 22

Remote code execution in Ivanti Secure Access Client versions prior to 22.8R6 allows unauthenticated attackers to run ar

CVE-2023-24492 HIGH
8.8 Jul 11

A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an at

CVE-2025-0320 HIGH
7.8 Jun 17

Local privilege escalation vulnerability in Citrix Secure Access Client for Windows that allows an authenticated, low-pr

CVE-2024-37398 HIGH
7.8 Nov 13

Insufficient validation in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate t

CVE-2023-41718 HIGH
7.8 Nov 15

When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the aff

CVE-2023-38543 HIGH
7.8 Nov 15

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally au

CVE-2023-38043 HIGH
7.8 Nov 15

A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally au

CVE-2023-35080 HIGH
7.8 Nov 15

A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticate

CVE-2023-24491 HIGH
7.8 Jul 11

A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an a

CVE-2024-13813 HIGH
7.1 Feb 11

Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to d

CVE-2024-8539 HIGH
7.1 Nov 12

Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to mod

Share

CVE-2024-7571 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy