CVE-2023-41718: High severity ivanti secure access client vulnerability

Published Nov 14, 2023

Updated

When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a specific file.

Affected Software

5 affected components

All of the following

Any of the following

Ivanti Secure Access Client=22.2-r1

Ivanti Secure Access Client=22.3-r1

Ivanti Secure Access Client=22.3-r2

Ivanti Secure Access Client=22.3-r3

Microsoft Windows

Event History

Nov 14, 2023

CVE Published

11:18 PM

Data Sourced

11:18 PM

DescriptionSeverity

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2023-41718.

What is the severity of CVE-2023-41718?

The severity of CVE-2023-41718 is high with a CVSS score of 7.8.

What software is affected by CVE-2023-41718?

Ivanti Secure Access Client versions 22.2-r1, 22.3-r1, 22.3-r2, and 22.3-r3 are affected by CVE-2023-41718.

How can an attacker exploit CVE-2023-41718?

An attacker can exploit CVE-2023-41718 by gaining control over a specific file during the initiation of a particular process flow.

Is Microsoft Windows affected by CVE-2023-41718?

No, Microsoft Windows is not affected by CVE-2023-41718.

Where can I find more information about CVE-2023-41718?

You can find more information about CVE-2023-41718 [here](https://forums.ivanti.com/s/article/Security-fixes-included-in-the-latest-Ivanti-Secure-Access-Client-Release).