CVE-2024-13813: 
Ivanti Secure Access Client vulnerability analysis and mitigation

A vulnerability identified as CVE-2024-13813 was discovered in Ivanti Secure Access Client versions prior to 22.8R1. The vulnerability was disclosed on February 11, 2025, and involves insufficient permissions that could allow a local authenticated attacker to delete arbitrary files on the system (NVD Database).

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.1 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H. It has been classified under CWE-732 (Incorrect Permission Assignment for Critical Resource) (NVD Database).

The vulnerability allows a local authenticated attacker to delete arbitrary files on the affected system, potentially leading to high impact on system integrity and availability. No confidentiality impact has been reported (NVD Database).

The vulnerability requires local access and low attack complexity, with low privileges needed for exploitation. No user interaction is required for the attack to succeed (NVD Database).

Users are advised to update to Ivanti Secure Access Client version 22.8R1 or later to address this vulnerability. This update has been made available as part of Ivanti's February 2025 security updates (ASEC Advisory).