Vulnerability · Published Nov 14, 2023 · Assigned by hackerone
CVE-2023-38544
Medium 5.3
In plain English
A medium-severity security flaw in Secure Access Linux from Ivanti. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Severity (CVSS 3.0)5.3Medium
Exploit odds (30 days)0.4%top 68.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability could be exploited to compromise the integrity and security of the network on the affected system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Ivanti | Secure Access Linux | 22.6.1 – before 22.6.1 |