Vulnerability in Ivanti Secure Access Client
CVE-2024-38654
Improper bounds checking in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker with admin privileges to cause a denial of service.
EPSS: 0.001 (18.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Ivanti Secure Access Client — versions 22.7R3
References
Frequently asked questions
- What is CVE-2024-38654?
- CVE-2024-38654 is a medium-severity vulnerability in Ivanti Secure Access Client. CVSS score: 4.4/10. Published 2024-11-13.
- How severe is CVE-2024-38654?
- Medium severity. CVSS v3 base score is 4.4 out of 10.