CVE-2024-24994

HIGH 8.8CVE-2024-24994 · Published 19/04/2024 · updated 17/06/2026

Package	Affected versions	Patched versions
avalanche ivanti	`< 6.4.3.528`	`6.4.3.528`

Description

A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM.

References

forums.ivanti.com/s/article/Avalanche-6-4-3-Security-Hardening-and-CVEs-addressed · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free