ewilded/CVE-2023-38041-POC

PoC

Ivanti Pulse Secure Client Connect Local Privilege Escalation CVE-2023-38041 Proof of Concept

view exploit source poc_in_githubauthor ewildedpublished 2024-02-25catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-38041US	high7.0	0.74% (54th)	Exploit	2023-10-25
A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition. When a particular process flow is initiated, an attacker can exploit…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.