ZDI-24-1487: Ivanti Secure Access Client Pulse Secure Service Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Ivanti Secure Access Client. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-7571.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-1487?
ZDI-24-1487 has been assigned a CVSS score indicating a significant risk, allowing local privilege escalation.
Who is affected by ZDI-24-1487?
ZDI-24-1487 affects installations of the Ivanti Secure Access Client.
How can I fix ZDI-24-1487?
To mitigate ZDI-24-1487, update to the latest version of the Ivanti Secure Access Client that includes the security patch.
What is the impact of ZDI-24-1487?
ZDI-24-1487 allows local attackers to escalate their privileges on systems running the affected Ivanti software.
How can an attacker exploit ZDI-24-1487?
An attacker must first execute low-privileged code on the target system to exploit ZDI-24-1487.