PublicCVE

CVE-2024-38654

MEDIUM4.4JSON exportCreate alert

Description

Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service.

CVSS breakdown

CVSS 3.0
Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Affected products