Ivanti Secure Access Client vulnerabilities

An improper certificate validation vulnerability in Ivanti Secure Access Client before 22.8R6 allows a remote unauthenticated attacker to execute arbitrary code.

A race condition in Ivanti Secure Access Client before version 22.8R6 allows a locally authenticated user to escalate privileges to SYSTEM.

An incorrect permission assignment for a critical resource in Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a shared memory section.