CVE-2025-22454

Ivanti / Secure Access Client PUBLISHED

Description (CNA)

Insufficiently restrictive permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.

Affected (CNA)

Vendor / product	Versions
Ivanti / Secure Access Client	unaffected 22.7R4; unaffected 22.8R1

CWE

CWE-732

References

https://forums.ivanti.com/s/article/March-Security-Advisory-Ivanti-Secure-Access-Client-ISAC-CVE-2025-22454

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.