High · 7.1 CVE-2024-13813 EUVD-2024-51752GHSA-9ppp-g4g9-895w

Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary fil…

Published Feb 11, 2025 · Updated Feb 11, 2025 · Assigned by ivanti

Vendor: ivanti Product: Secure Access Client Category: Network devices

Description

Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to delete arbitrary files.

Affected products

Vendor	Product	Affected	Fixed
Ivanti	Secure Access Client	—	22.8R1

Advisories 2

NCSC-2025-0052 Kwetsbaarheden verholpen in Ivanti Connect Secure en Ivanti Policy Secure NCSC-NL (Netherlands) · Feb 12, 2025
WID-SEC-2025-0351 Ivanti Connect Secure, Policy Secure und Secure Access Client: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 11, 2025

References

https://forums.ivanti.com/s/article/February-Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-and-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs