CVE-2023-46810: 
Ivanti Secure Access Client vulnerability analysis and mitigation

A local privilege escalation vulnerability identified as CVE-2023-46810 affects the Ivanti Secure Access Client for Linux versions before 22.7R1. This security flaw enables a low-privileged user to execute code with elevated system privileges (Ivanti Advisory, Debian Tracker).

The vulnerability has been assigned a CVSS score of 7.3 with the vector CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H. This scoring indicates that the vulnerability requires local access, low attack complexity, low privileges, and user interaction to exploit, while potentially resulting in high impacts to confidentiality, integrity, and availability (Ivanti Advisory).

If successfully exploited, this vulnerability allows a low-privileged user to execute code with SYSTEM-level privileges on the affected Linux system, potentially leading to complete system compromise (Hacker News).

The vulnerability requires local access and user interaction to exploit. There are no reports of this vulnerability being actively exploited in the wild (Hacker News).

Ivanti has released version 22.7R1 of the Secure Access Client for Linux to address this vulnerability. Users are advised to upgrade to this version or later to mitigate the security risk (Ivanti Advisory).