An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a shared memory section.
An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a shared memory section.
Why this VPI (explainable, experimental)
VPI breakdown
| Impact | 44.00 |
| Exploitation signal(No additional exploitation signal) | ×1.00 |
| VPI | 44.00 |
VPI formula vpi-v1