CVE-2023-38042: High severity ivanti secure access client vulnerability
Published May 31, 2024
·Updated
A local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a low privileged user to execute code as SYSTEM.
Affected Software
3 affected components
Ivanti Secure Access Client
All of the following
Ivanti Secure Access Client<22.7
Microsoft Windows
Event History
May 31, 2024
CVE Published
via MITRE·05:38 PM
Data Sourced
via MITRE·05:38 PM
DescriptionSeverity
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-38042?
CVE-2023-38042 has been classified as a high severity local privilege escalation vulnerability.
2
How do I fix CVE-2023-38042?
To fix CVE-2023-38042, update Ivanti Secure Access Client to the latest version provided by the vendor.
3
Who is affected by CVE-2023-38042?
CVE-2023-38042 affects users running vulnerable versions of Ivanti Secure Access Client for Windows.
4
What is the impact of CVE-2023-38042?
The impact of CVE-2023-38042 allows a low privileged user to execute code with elevated SYSTEM privileges.
5
When was CVE-2023-38042 disclosed?
CVE-2023-38042 was disclosed in 2023, with further details outlined in Ivanti's security advisories.