CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2023-38041

A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a particular process flow is initiated, an attacker can exploit this condition to gain unauthorized elevated privileges on the affected system.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 54.7%

CVSS Severity

CVSS v3 Score 7.8

References

https://forums.ivanti.com/s/article/CVE-2023-38041-New-client-side-release-to-address-a-privilege-escalation-on-Windows-user-machines?language=en_US
https://forums.ivanti.com/s/article/CVE-2023-38041-New-client-side-release-to-address-a-privilege-escalation-on-Windows-user-machines?language=en_US

Products affected by CVE-2023-38041

Ivanti » Secure Access Client » Version: N/A

cpe:2.3:a:ivanti:secure_access_client:-
Ivanti » Secure Access Client » Version: 22.2

cpe:2.3:a:ivanti:secure_access_client:22.2
Ivanti » Secure Access Client » Version: 22.3

cpe:2.3:a:ivanti:secure_access_client:22.3
Ivanti » Secure Access Client » Version: 22.5

cpe:2.3:a:ivanti:secure_access_client:22.5
Microsoft » Windows » Version: N/A

cpe:2.3:o:microsoft:windows:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-38041

Products

Pricing

Contact Us