5.5

CVE-2023-38544

A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability could be exploited to compromise the integrity and security of the network on the affected system.

Data is provided by the National Vulnerability Database (NVD)
Ivanti ≫ Secure Access Client Version22.2 Updater1
   Linux ≫ Linux Kernel Version-
Ivanti ≫ Secure Access Client Version22.3 Updater1
   Linux ≫ Linux Kernel Version-
Ivanti ≫ Secure Access Client Version22.3 Updater2
   Linux ≫ Linux Kernel Version-
Ivanti ≫ Secure Access Client Version22.3 Updater3
   Linux ≫ Linux Kernel Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.17% 0.395
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
support@hackerone.com 5.3 1.8 3.4
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L