JustAppSec
MEDIUM SeverityCVSS 3.14.4CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CVE-2026-7431

Last updated May 12, 2026 · Published May 12, 2026

← Back to list

Description

An incorrect permission assignment for critical resource of Ivanti Secure Access Client   before 22.8R6 allows a local authenticated user to read or modify sensitive log data via write access to a shared memory section.

Affected products

1 listed
  • ivanti:Secure Access Client

Mappings

CWE

CWE-732

CAPEC

CAPEC-1

CVE® content © MITRE Corporation. Licensed under the CVE Terms of Use. Terms

Need help?Get in touch.