CVE-2023-38042

A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a low privileged user to execute code as SYSTEM.

Score

CVSS 3.0 7.8 High

Status

Analyzed - support@hackerone.com

Published

2024-05-31

Last modified

2024-08-02

Weaknesses

CWE-250

Affected products

• Secure Access Client (Ivanti)

References

• https://forums.ivanti.com/s/article/Security-Advisory-May-2024?language=en_US