CVE-2023-35080
Assigner: hackerone
Published: 2023-11-14T23:18:08.387Z
State: PUBLISHED
descriptions: value: A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to various security risks, including the escalation of privileges, denial of service, or information disclosure.
affected: defaultStatus: unaffected
vendor: Ivanti
product: Secure Access Client
versions: version: 22.6.1.1
status: affected
lessThan: 22.6.1.1
versionType: semver
metrics: cvssV3_0: version: 3.0
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
baseScore: 8.8
baseSeverity: HIGH