7.8
High
CVE-2025-22454 Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated…
Description
Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Secure Access Client 22.8 | earliest → < 22.8R1 | 22.8R1 |
| Secure Access Client 22.7 | earliest → < 22.7R4 | 22.7R4 |
References
- forums.ivanti.com forums.ivanti.com
Timeline
- Published
- Last modified
Other CVEs of Secure Access Client
The 15 CVEs of Secure Access Client →
CVE-2026-8992
An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote…
8.8
High
CVE-2026-7432
A race condition in Ivanti Secure Access Client before 22.8R6 allows a locally authenticated user to escalate privileges…
7.8
High
CVE-2026-7431
An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local…
4.4
Medium
CVE-2024-13813
Insufficient permissions in Ivanti Secure Access Client before version 22.8R1 allows a local authenticated attacker to…
7.1
High