CVE-2024-13181

CRITICAL 9.8CVE-2024-13181 · Published 14/01/2025 · updated 17/06/2026

Package	Affected versions	Patched versions
avalanche ivanti	`< 6.4.6`	`6.4.6`

Description

Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass authentication. This CVE addresses incomplete fixes from CVE-2024-47010.

References

forums.ivanti.com/s/article/Security-Advisory-Ivanti-Avalanche-6-4-7-Multiple-CVEs · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free