High · 7.8 CVE-2025-22454 EUVD-2025-7612GHSA-38gj-h5v9-v9pm

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their…

Published Mar 11, 2025 · Updated Feb 26, 2026 · Assigned by ivanti

Vendor: ivanti Product: Secure Access Client Category: Network devices

Description

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.

Affected products

Vendor	Product	Affected	Fixed
Ivanti	Secure Access Client	—	22.7R4

Advisories 2

NCSC-2025-0085 Kwetsbaarheid verholpen in Ivanti Secure Access Client NCSC-NL (Netherlands) · Mar 12, 2025
WID-SEC-2025-0525 Ivanti Secure Access Client: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Mar 11, 2025

References

https://forums.ivanti.com/s/article/March-Security-Advisory-Ivanti-Secure-Access-Client-ISAC-CVE-2025-22454

CNA	v3.1	7.8
EUVD	v3.1	7.8