CVE-2026-7431CWE-732
An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify…
Medium · published May 12, 2026
What it is
An incorrect permission assignment for critical resource of Ivanti Secure Access Client before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a shared memory section.
The record
Technical detail
- CVSS v3.1
- 4.4 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00238 · 14.1th percentile
- Weakness
- CWE-732 · Incorrect Permission Assignment for Critical Resource
- Published
- 2026-05-12T14:18Z
EPSS history
Timeline